Important: mod_auth_openidc

Issue Overview: modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser...

Amazon Linux 2023 : mod_auth_openidc (ALAS2023-2026-2155)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2155 advisory. modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an...

Important: mod_auth_openidc

Issue Overview: modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser...

Amazon Linux 2 : mod_auth_openidc (ALAS-2026-3920)

The version of modauthopenidc installed on the remote host is prior to 1.8.8-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3920 advisory. modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements...

Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3953-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...

Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3952-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...

openSUSE 16 Security Update : apache2-mod_auth_openidc (openSUSE-SU-2026:21717-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21717-1 advisory. This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the...

[SECURITY] [DLA 4768-1] libapache2-mod-auth-openidc security update

Debian LTS Advisory DLA-4768-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 02, 2026 https://wiki.debian.org/LTS Package : libapache2-mod-auth-openidc Version : 2.4.12.3-2+deb12u5 CVE ID : CVE-2026-54789 A vulnerability has been found in modauthopenidc...

Debian dla-4768 : libapache2-mod-auth-openidc - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4768 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4768-1 [email protected] https://www.debian.org/lts/security/...

Security update for apache2-mod_auth_openidc (important)

openSUSE security update: security update for apache2-modauthopenidc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21717-1 Rating: important References: bsc1276217 Cross-References: CVE-2026-54789 CVSS scores: CVE-2026-54789 SUSE : 7.5...

Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3915-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...

OPENSUSE-SU-2026:21717-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...

SUSE-SU-2026:23593-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...

SUSE CVE-2026-54789

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...

Linux Distros Unpatched Vulnerability : CVE-2026-54789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party...

AZL-96984 CVE-2026-54789 affecting package mod_auth_openidc 2.4.14.2-2

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...

CVE-2026-54789

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...