mod_auth_openidc:2.3 security update

2023-08-0200:00:00

linux.oracle.com

mod_auth_openidc

security update

cjose

cve-2023-37464

aes gcm decryption

jwe

rhbz#2223308

rebase

rhbz#2025368

EPSS

0.003

Percentile

65.9%

JSON

cjose
[0.6.1-3]

CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
Authentication Tag provided in the JWE
Resolves: rhbz#2223308
mod_auth_openidc
[2.4.9.4-1]
Resolves: rhbz#2025368 - Rebase to new version

OSVersionArchitecturePackageVersionFilename
oracle linux8srccjose< 0.6.1-3.modulecjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.src.rpm
oracle linux8srcmod_auth_openidc< 2.4.9.4-1.modulemod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.src.rpm
oracle linux8aarch64cjose< 0.6.1-3.modulecjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.aarch64.rpm
oracle linux8aarch64cjose-devel< 0.6.1-3.modulecjose-devel-0.6.1-3.module+el8.8.0+21137+b6cedbc2.aarch64.rpm
oracle linux8aarch64mod_auth_openidc< 2.4.9.4-1.modulemod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.aarch64.rpm
oracle linux8srccjose< 0.6.1-3.modulecjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.src.rpm
oracle linux8srcmod_auth_openidc< 2.4.9.4-1.modulemod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.src.rpm
oracle linux8x86_64cjose< 0.6.1-3.modulecjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.x86_64.rpm
oracle linux8x86_64cjose-devel< 0.6.1-3.modulecjose-devel-0.6.1-3.module+el8.8.0+21137+b6cedbc2.x86_64.rpm
oracle linux8x86_64mod_auth_openidc< 2.4.9.4-1.modulemod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	cjose	< 0.6.1-3.module	cjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.src.rpm
oracle linux	8	src	mod_auth_openidc	< 2.4.9.4-1.module	mod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.src.rpm
oracle linux	8	aarch64	cjose	< 0.6.1-3.module	cjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.aarch64.rpm
oracle linux	8	aarch64	cjose-devel	< 0.6.1-3.module	cjose-devel-0.6.1-3.module+el8.8.0+21137+b6cedbc2.aarch64.rpm
oracle linux	8	aarch64	mod_auth_openidc	< 2.4.9.4-1.module	mod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.aarch64.rpm
oracle linux	8	src	cjose	< 0.6.1-3.module	cjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.src.rpm
oracle linux	8	src	mod_auth_openidc	< 2.4.9.4-1.module	mod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.src.rpm
oracle linux	8	x86_64	cjose	< 0.6.1-3.module	cjose-0.6.1-3.module+el8.8.0+21137+b6cedbc2.x86_64.rpm
oracle linux	8	x86_64	cjose-devel	< 0.6.1-3.module	cjose-devel-0.6.1-3.module+el8.8.0+21137+b6cedbc2.x86_64.rpm
oracle linux	8	x86_64	mod_auth_openidc	< 2.4.9.4-1.module	mod_auth_openidc-2.4.9.4-1.module+el8.7.0+20769+fca4d9d0.x86_64.rpm