Описание
ELSA-2023-6365: mod_auth_openidc security and bug fix update (MODERATE)
[2.4.9.4-4] Resolves: rhbz#2189268 - auth_openidc.conf mode 0640 by default
[2.4.9.4-3]
- Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied
[2.4.9.4-2]
- Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in oidc_validate_redirect_url() using tab character
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
mod_auth_openidc
2.4.9.4-4.el9
Oracle Linux x86_64
mod_auth_openidc
2.4.9.4-4.el9
