ELSA-2026-79177 - mod_auth_openidc security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-10-11 |
Description
[2.4.16.11-1.1]
- Resolves: RHEL-248048 - CVE-2026-54789 out-of-bounds read/write
in oidc_state_cookies_clean_expired when a state-prefixed cookie
token contains no '=' separator
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 9 (aarch64) | mod_auth_openidc-2.4.16.11-1.el9_8.1.src.rpm | ec609a6bdd52d8c74f3e4909b78713ae6bc12722cdc7a82d33d3b50af4523807 | - | ol9_aarch64_appstream |
| mod_auth_openidc-2.4.16.11-1.el9_8.1.aarch64.rpm | 18178d4df6d88e6057b110376365c07160fee4f8e1aac6e398e630dc94db56ce | - | ol9_aarch64_appstream |
|
| Oracle Linux 9 (x86_64) | mod_auth_openidc-2.4.16.11-1.el9_8.1.src.rpm | ec609a6bdd52d8c74f3e4909b78713ae6bc12722cdc7a82d33d3b50af4523807 | - | ol9_x86_64_appstream |
| mod_auth_openidc-2.4.16.11-1.el9_8.1.x86_64.rpm | 386b8fc2b00428b68307c9156a646269af0e0da0c6a1e08d6c0ba98d7206c18d | - | ol9_x86_64_appstream |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
