ELSA-2026-77369

ELSA-2026-77369 - mod_auth_openidc:2.3 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-09

Description


cjose
[0.6.1-5]
- CVE-2026-53938 cjose: heap buffer overflow in AES key unwrap
Resolves: RHEL-256961

mod_auth_openidc
[2.4.9.4-9]
- Resolves: RHEL-248080 CVE-2026-54789 Denial of Service via malformed state
cookie parsing


Related CVEs


CVE-2026-53938
CVE-2026-54789

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) cjose-0.6.1-5.module+el8.10.0+91060+e975931f.src.rpm2bb2ba303254ec8c9f92f3b09fbc6ac8845569b0174eb435dbf40ce3d017758b-ol8_aarch64_appstream
mod_auth_openidc-2.4.9.4-9.module+el8.10.0+91060+e975931f.src.rpm4eaff4fabec9c5e5d1983727143d043f69783c14618ce6281a282867a5b24c4e-ol8_aarch64_appstream
cjose-0.6.1-5.module+el8.10.0+91060+e975931f.aarch64.rpm369c65c0a18f7397861f7402d83798ea80407be02f29050011051939776e9338-ol8_aarch64_appstream
cjose-devel-0.6.1-5.module+el8.10.0+91060+e975931f.aarch64.rpm0ae184197a08a10a95a224c2f6a503ea163ec7571d4a357433a806b2eead4a0d-ol8_aarch64_appstream
mod_auth_openidc-2.4.9.4-9.module+el8.10.0+91060+e975931f.aarch64.rpm7f25ebc04f5759e01203866540f884d174c2a0ec7d6b9ccd6e6d4c661f2ef3af-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) cjose-0.6.1-5.module+el8.10.0+91060+e975931f.src.rpm2bb2ba303254ec8c9f92f3b09fbc6ac8845569b0174eb435dbf40ce3d017758b-ol8_x86_64_appstream
mod_auth_openidc-2.4.9.4-9.module+el8.10.0+91060+e975931f.src.rpm4eaff4fabec9c5e5d1983727143d043f69783c14618ce6281a282867a5b24c4e-ol8_x86_64_appstream
cjose-0.6.1-5.module+el8.10.0+91060+e975931f.x86_64.rpmf498cb67f4bf397ed809ea8773f9dc70afa7f485ed193080cabf946ee5b43933-ol8_x86_64_appstream
cjose-devel-0.6.1-5.module+el8.10.0+91060+e975931f.x86_64.rpmccdd404323ec8fa8b5d22d7d3e9c4eb744e3cd27654501e143416ced78b6d850-ol8_x86_64_appstream
mod_auth_openidc-2.4.9.4-9.module+el8.10.0+91060+e975931f.x86_64.rpm841472a9e84e61b456c29a142705111c6667bdc5747cd3557a2826bf814762b9-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete