- Update to 0.6.2.3 to fix Clang build errors - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4). - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4). - fix memory allocation check (typo) in jwk.c (version:0.6.2.4). - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4). - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4). - Update to 0.6.2.7 - Remove unused buildrequires - Update to 0.6.2.3 to fix Clang build errors - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4). - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4). - fix memory allocation check (typo) in jwk.c (version:0.6.2.4). - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4). - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4). - Update to 0.6.2.7 - Remove unused buildrequires - Update to 0.6.2.3 to fix Clang build errors - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4). - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4). - fix memory allocation check (typo) in jwk.c (version:0.6.2.4). - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4). - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4). - Update to 0.6.2.7 - Remove unused buildrequires - Update to 0.6.2.3 to fix Clang build errors - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4). - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4). - fix memory allocation check (typo) in jwk.c (version:0.6.2.4). - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4). - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4). - Update to 0.6.2.7 - Remove unused buildrequires - Update to 0.6.2.3 to fix Clang build errors - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4). - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4). - fix memory allocation check (typo) in jwk.c (version:0.6.2.4). - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4). - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4). - Update to 0.6.2.7 - Remove unused buildrequires - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - Update to 2.4.19.4 for fix CVE-2026-54789 - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - Update to 2.4.19.4 for fix CVE-2026-54789 - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - Update to 2.4.19.4 for fix CVE-2026-54789 - Update to 2.4.16.6: * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting * info: fix requests to the info hook with extend_session=false * cookie: OIDCCookieSameSite default behaviour Lax * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found on the system upon initaliizing cache mutexes and the file cache * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards compatibility with <=2.4.15.7 and to support private/test deployments * code: address warnings from static code analysis tool CodeChecker - Update to 2.4.16.11 for fix CVE-2025-31492 - Update to 2.4.19.4 for fix CVE-2026-54789