Summary
[1.8.8-9.0.1]
- Backport fix for CVE-2026-54789 [Orabug: 40056267]
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | mod_auth_openidc | 0:1.8.8-9.0.1.el7_9 |
Vulnerabilities 1
-
High 7.5
mod_auth_openidc has out-of-bounds read and write in state cookie parsing
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in…