< back to search

shield Security update for apache2-mod_auth_openidc

SUSE-SLE-Module-Server-Applications-15-SP4-2023-215

This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2022-23527: Fixed open redirect in oidc_validate_redirect_url() using tab character (bsc#1206441). - CVE-2021-39191: Fixed open redirect issue in target_link_uri parameter (bsc#1190223).

Release Date

Jan 30 2023
References

Bugzilla: 1190223, 1206441, 1199868
CVEs: CVE-2021-39191, CVE-2022-23527
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.4 s390x

Packages

apache2-mod_auth_openidc
Apache2.x module for an OpenID Connect enabled Identity Provider

2.3.8-150100.3.22.1 lock rpm lock src

Server Applications Module 15.4 ppc64le

Packages

apache2-mod_auth_openidc
Apache2.x module for an OpenID Connect enabled Identity Provider

2.3.8-150100.3.22.1 lock rpm lock src

Server Applications Module 15.4 aarch64

Packages

apache2-mod_auth_openidc
Apache2.x module for an OpenID Connect enabled Identity Provider

2.3.8-150100.3.22.1 lock rpm lock src

Server Applications Module 15.4 x86_64

Packages

apache2-mod_auth_openidc
Apache2.x module for an OpenID Connect enabled Identity Provider

2.3.8-150100.3.22.1 lock rpm lock src