Oracle Errata System
Oracle Linux
5.11
2026-10-13T11:24:01
ELSA-2026-77369: mod_auth_openidc:2.3 security update (IMPORTANT)
Oracle Linux 8
cjose
[0.6.1-5]
- CVE-2026-53938 cjose: heap buffer overflow in AES key unwrap
Resolves: RHEL-256961
mod_auth_openidc
[2.4.9.4-9]
- Resolves: RHEL-248080 CVE-2026-54789 Denial of Service via malformed state
cookie parsing
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-53938
CVE-2026-54789
cpe:/a:oracle:linux:8::appstream
mod_auth_openidc
cjose
cjose-devel
oraclelinux-release
/etc/dnf/modules.d/mod_auth_openidc.module
\[mod_auth_openidc\][\w\W]*
1
82562ea9ad986da3
\nstream\s*=\s*2\.3\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*2\.3\b
^8
aarch64
0:0.6.1-5.module+el8.10.0+91060+e975931f
0:2.4.9.4-9.module+el8.10.0+91060+e975931f
x86_64