FEDORA-2023-b534ca7056 — security update for CVE-2023-28625 mod_auth_openidc: NULL pointer dereference

testing

FEDORA-2023-b534ca7056 created by thalman a week ago for Fedora 38

Rebase to 2.4.13.2 version, fix CVE-2023-28625

sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-b534ca7056

This update has been submitted for testing by thalman.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a week ago

in testing

6 days ago

days to stable

BZ#2184118 CVE-2023-28625 mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied

BZ#2184119 CVE-2023-28625 mod_auth_openidc: NULL pointer dereference when `OIDCStripCookies` is set and a crafted cookie supplied [fedora-all]

mod_auth_openidc-2.4.13.2-1.fc38

ignored