Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-24814

  Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc

  mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on mod_auth_openidc_session_chunks co…

  OpenIDC mod_auth_openidc libapache2-mod-auth-openidc libapache2-mod-auth-openidc Debian Ubuntu Azure Linux
  Feb 13, 2024
• Medium 5.3
  CVE-2024-35176 Public exploit

  REXML contains a denial of service vulnerability

  REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.…

  ruby rexml kube-fluentd-operator ruby2.3 Debian Ubuntu Azure Linux Wolfi RubyGems
  May 16, 2024

Revision history

1. 2026-10-11 #7

   Neue Updates von Oracle Linux aufgenommen

2. 2025-12-29 #6

   Neue Updates von SUSE aufgenommen

3. 2025-10-27 #5

   Neue Updates von Ubuntu aufgenommen

4. 2024-11-11 #4

   Neue Updates von Red Hat aufgenommen

5. 2024-08-18 #3

   Neue Updates von Oracle Linux aufgenommen

6. 2024-08-14 #2

   Neue Updates von Oracle Linux aufgenommen

7. 2024-08-13 #1

   Initiale Fassung

References

• RedHat Security Advisory vom 2024-08-13
  https://access.redhat.com/errata/RHSA-2024:5289
• RedHat Security Advisory vom 2024-08-13
  https://access.redhat.com/errata/RHSA-2024:5338
• Oracle Linux Security Advisory ELSA-2024-5289 vom 2024-08-14
  https://linux.oracle.com/errata/ELSA-2024-5289.html
• Oracle Linux Security Advisory ELSA-2024-5338 vom 2024-08-16
  https://linux.oracle.com/errata/ELSA-2024-5338.html
• Red Hat Security Advisory RHSA-2024:9180 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9180
• Ubuntu Security Notice USN-7840-1 vom 2025-10-27
  https://ubuntu.com/security/notices/USN-7840-1
• SUSE Security Update SUSE-SU-2025:4532-1 vom 2025-12-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BBKJJQYVUC6MKZNDXGZERGROZTUYLEKW/
• SUSE Security Update SUSE-SU-2025:4532-1 vom 2025-12-29
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023659.html
• Oracle Linux Security Advisory ELSA-2026-73519 vom 2026-10-09
  http://linux.oracle.com/errata/ELSA-2026-73519.html