Red Hat Security AdvisoryRHSA-2025:4227
mod_auth_openidc:2.3 security update
Released 2025-04-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) cjose-0.6.1-3.module+el8.4.0+19462+14bde120.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.4.0+19462+14bde120.x86_64::mod_auth_openidc:2.3, cjose-devel-0.6.1-3.module+el8.4.0+19462+14bde120.x86_64::mod_auth_openidc:2.3 +2
- Red Hat Enterprise Linux AppStream E4S (v.8.4) cjose-0.6.1-3.module+el8.4.0+19462+14bde120.ppc64le::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.4.0+19462+14bde120.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.4.0+19462+14bde120.x86_64::mod_auth_openidc:2.3 +5
- Red Hat Enterprise Linux AppStream TUS (v.8.4) cjose-0.6.1-3.module+el8.4.0+19462+14bde120.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.4.0+19462+14bde120.x86_64::mod_auth_openidc:2.3, cjose-devel-0.6.1-3.module+el8.4.0+19462+14bde120.x86_64::mod_auth_openidc:2.3 +2
Fixes 1 record
Priority MEDIUM 42
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00592 · Published 2025-04-06 · Partial fix · 2.4.16.11 CWE-200
