2 matches found
mod_auth_openidc:2.3 security and bug fix update
cjose 0.6.1-4 - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz2223308 modauthopenidc 2.4.9.4-5 Related: rhbz2141850 - fix cjose version dependency 2.4.9.4-4 Resolves: rhbz2141850 - authopenidc.conf mode 0640 by...
mod_auth_openidc security and bug fix update
2.4.9.4-4 Resolves: rhbz2189268 - authopenidc.conf mode 0640 by default 2.4.9.4-3 - Resolves: rhbz2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied 2.4.9.4-2 - Resolves: rhbz2153656 - CVE-2022-23527 - Open Redirect in...