Red Hat Security AdvisoryRHSA-2025:3997
mod_auth_openidc:2.3 security update
Released 2025-04-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) cjose-0.6.1-4.module+el8.10.0+21813+b5444eb8.aarch64::mod_auth_openidc:2.3, cjose-0.6.1-4.module+el8.10.0+21813+b5444eb8.ppc64le::mod_auth_openidc:2.3, cjose-0.6.1-4.module+el8.10.0+21813+b5444eb8.s390x::mod_auth_openidc:2.3 +11
Fixes 1 record
Priority MEDIUM 42
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00592 · Published 2025-04-06 · Partial fix · 2.4.16.11 CWE-200
