RedHatRHSA-2023:4409

HistoryAug 01, 2023 - 1:27 p.m.

(RHSA-2023:4409) Important: mod_auth_openidc:2.3 security update

2023-08-0113:27:34

access.redhat.com

mod_auth_openidc

openid connect

apache http server

security update

cve-2023-37464

cjose

aes gcm decryption

0.001 Low

EPSS

Percentile

48.9%

JSON

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

Security Fix(es):

cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE (CVE-2023-37464)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lemod_auth_openidc-debugsource< 2.3.7-8.module+el8.4.0+9707+f2438af7mod_auth_openidc-debugsource-2.3.7-8.module+el8.4.0+9707+f2438af7.ppc64le.rpm
RedHatanys390xmod_auth_openidc-debuginfo< 2.3.7-8.module+el8.4.0+9707+f2438af7mod_auth_openidc-debuginfo-2.3.7-8.module+el8.4.0+9707+f2438af7.s390x.rpm
RedHatanys390xmod_auth_openidc< 2.3.7-8.module+el8.4.0+9707+f2438af7mod_auth_openidc-2.3.7-8.module+el8.4.0+9707+f2438af7.s390x.rpm
RedHatanys390xcjose-devel< 0.6.1-3.module+el8.4.0+19462+14bde120cjose-devel-0.6.1-3.module+el8.4.0+19462+14bde120.s390x.rpm
RedHatanyppc64lecjose-devel< 0.6.1-3.module+el8.4.0+19462+14bde120cjose-devel-0.6.1-3.module+el8.4.0+19462+14bde120.ppc64le.rpm
RedHatanyaarch64cjose< 0.6.1-3.module+el8.4.0+19462+14bde120cjose-0.6.1-3.module+el8.4.0+19462+14bde120.aarch64.rpm
RedHatanyx86_64mod_auth_openidc-debugsource< 2.3.7-8.module+el8.4.0+9707+f2438af7mod_auth_openidc-debugsource-2.3.7-8.module+el8.4.0+9707+f2438af7.x86_64.rpm
RedHatanyaarch64cjose-debugsource< 0.6.1-3.module+el8.4.0+19462+14bde120cjose-debugsource-0.6.1-3.module+el8.4.0+19462+14bde120.aarch64.rpm
RedHatanys390xcjose-debuginfo< 0.6.1-3.module+el8.4.0+19462+14bde120cjose-debuginfo-0.6.1-3.module+el8.4.0+19462+14bde120.s390x.rpm
RedHatanys390xmod_auth_openidc-debugsource< 2.3.7-8.module+el8.4.0+9707+f2438af7mod_auth_openidc-debugsource-2.3.7-8.module+el8.4.0+9707+f2438af7.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	mod_auth_openidc-debugsource	< 2.3.7-8.module+el8.4.0+9707+f2438af7	mod_auth_openidc-debugsource-2.3.7-8.module+el8.4.0+9707+f2438af7.ppc64le.rpm
RedHat	any	s390x	mod_auth_openidc-debuginfo	< 2.3.7-8.module+el8.4.0+9707+f2438af7	mod_auth_openidc-debuginfo-2.3.7-8.module+el8.4.0+9707+f2438af7.s390x.rpm
RedHat	any	s390x	mod_auth_openidc	< 2.3.7-8.module+el8.4.0+9707+f2438af7	mod_auth_openidc-2.3.7-8.module+el8.4.0+9707+f2438af7.s390x.rpm
RedHat	any	s390x	cjose-devel	< 0.6.1-3.module+el8.4.0+19462+14bde120	cjose-devel-0.6.1-3.module+el8.4.0+19462+14bde120.s390x.rpm
RedHat	any	ppc64le	cjose-devel	< 0.6.1-3.module+el8.4.0+19462+14bde120	cjose-devel-0.6.1-3.module+el8.4.0+19462+14bde120.ppc64le.rpm
RedHat	any	aarch64	cjose	< 0.6.1-3.module+el8.4.0+19462+14bde120	cjose-0.6.1-3.module+el8.4.0+19462+14bde120.aarch64.rpm
RedHat	any	x86_64	mod_auth_openidc-debugsource	< 2.3.7-8.module+el8.4.0+9707+f2438af7	mod_auth_openidc-debugsource-2.3.7-8.module+el8.4.0+9707+f2438af7.x86_64.rpm
RedHat	any	aarch64	cjose-debugsource	< 0.6.1-3.module+el8.4.0+19462+14bde120	cjose-debugsource-0.6.1-3.module+el8.4.0+19462+14bde120.aarch64.rpm
RedHat	any	s390x	cjose-debuginfo	< 0.6.1-3.module+el8.4.0+19462+14bde120	cjose-debuginfo-0.6.1-3.module+el8.4.0+19462+14bde120.s390x.rpm
RedHat	any	s390x	mod_auth_openidc-debugsource	< 2.3.7-8.module+el8.4.0+9707+f2438af7	mod_auth_openidc-debugsource-2.3.7-8.module+el8.4.0+9707+f2438af7.s390x.rpm

Rows per page:

1-10 of 281

(RHSA-2023:4409) Important: mod_auth_openidc:2.3 security update

Related