apache2-mod_auth_mellon-0.17.0-150600.14.3 RPM for aarch64

From OpenSuSE Leap 15.6 for aarch64

The mod_auth_mellon module is an authentication service that implements the
SAML 2.0 federation protocol. It grants access based on the attributes
received in assertions generated by a IdP server.

Provides

• apache2-mod_auth_mellon
• apache2-mod_auth_mellon(aarch-64)
• config(apache2-mod_auth_mellon)

Requires

• /bin/bash
• /bin/sh
• apache_mmn_20120211
• config(apache2-mod_auth_mellon) = 0.17.0-150600.14.3
• ld-linux-aarch64.so.1()(64bit)
• ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcurl.so.4()(64bit)
• libglib-2.0.so.0()(64bit)
• liblasso.so.3()(64bit)
• liblasso3 >= 2.5.1
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsXz) <= 5.2-1
• suse_maintenance_mmn_0

License

GPL-2.0-or-later

Changelog

* Mon Aug 02 2021 danilo.spinella@suse.com
  - Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
    (CVE-2021-3639, bsc#1188926)
    * fix-CVE-2021-3639.patch
* Mon Aug 02 2021 danilo.spinella@suse.com
  - Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
    (CVE-2021-3639, bsc#1188926)
    * fix-CVE-2021-3639.patch
* Thu Sep 10 2020 kstreitova@suse.com
  - Update to 0.17.0
    * New option MellonSendExpectHeader (default On) which allows to
      disable sending the Expect header in the HTTP-Artifact binding to
      improve performance when the remote party does not support this
      header.
    * Set SameSite attribute to None on on the cookietest cookie.
    * Bump default generated keysize to 3072 bits in
      mellon_create_metadata
    * Validate if the assertion ID has not been used earlier before
      creating a new session.
    * Release session cache after calling invalidate endpoint.
    * In MellonCond directives, fix a bug that setting the NC option
      would also activate substring match and that REG would activate
      REF.
    * Fix MellonCond substring match to actually match the substring on
      the attribute value
* Thu Jun 04 2020 kstreitova@suse.com
  - update mod_auth_mellon-0.16.0-env-script-interpreter.patch
    use /bin/bash instead of /usr/bin/bash
* Mon May 11 2020 kstreitova@suse.com
  - replace version_path with the fixed value
* Tue Apr 28 2020 kstreitova@suse.com
  - initial packaging

Files

/etc/apache2/conf.d/mod_auth_mellon.conf
/run/mod_auth_mellon
/usr/lib/apache2-mod_auth_mellon
/usr/lib/apache2-mod_auth_mellon/mellon_create_metadata.sh
/usr/lib/tmpfiles.d/apache2-mod_auth_mellon.conf
/usr/lib64/apache2/mod_auth_mellon.so
/usr/share/doc/packages/apache2-mod_auth_mellon
/usr/share/doc/packages/apache2-mod_auth_mellon/ECP.rst
/usr/share/doc/packages/apache2-mod_auth_mellon/NEWS
/usr/share/doc/packages/apache2-mod_auth_mellon/README.md
/usr/share/licenses/apache2-mod_auth_mellon
/usr/share/licenses/apache2-mod_auth_mellon/COPYING

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Mar 9 16:56:46 2026