TI-2023-19073 CVE-2023-37464
Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose
Priority MEDIUM 44
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE).
RHSA-2023:4410
mod_auth_openidc:2.3 security update
Released 2023-08-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64::mod_auth_openidc:2.3, cjose-devel-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64::mod_auth_openidc:2.3 +2
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.ppc64le::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64::mod_auth_openidc:2.3 +5
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64::mod_auth_openidc:2.3, cjose-devel-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64::mod_auth_openidc:2.3 +2