TI-2025-03438 CVE-2025-3891 · GHSA-v96g-5j57-774c
Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled
Priority MEDIUM 42
A flaw was found in the mod_auth_openidc module for Apache httpd.
RHSA-2025:10008
mod_auth_openidc security update
Released 2025-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) mod_auth_openidc-2.4.9.4-1.el9_2.3