Red Hat Security AdvisoryRHSA-2026:69713
mod_auth_openidc:2.3 security update
Released 2026-09-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) cjose-0.6.1-3.module+el8.6.0+19463+7d2e1f9c.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.6.0+19463+7d2e1f9c.x86_64::mod_auth_openidc:2.3, cjose-devel-0.6.1-3.module+el8.6.0+19463+7d2e1f9c.x86_64::mod_auth_openidc:2.3 +2
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) cjose-0.6.1-3.module+el8.6.0+19463+7d2e1f9c.src::mod_auth_openidc:2.3, cjose-0.6.1-3.module+el8.6.0+19463+7d2e1f9c.x86_64::mod_auth_openidc:2.3, cjose-devel-0.6.1-3.module+el8.6.0+19463+7d2e1f9c.x86_64::mod_auth_openidc:2.3 +2
Fixes 1 record
Priority LOW 39
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00488 · Published 2026-08-21 · Fixed in 2.4.19.4 CWE-125
