stable

CVE-2023-28625 mod_auth_openidc: NULL pointer dereference

FEDORA-2023-b534ca7056 created by thalman a year ago for Fedora 38

Rebase to 2.4.13.2 version, fix CVE-2023-28625

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-b534ca7056

This update has been submitted for testing by thalman.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

This update has been pushed to testing.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
0
Signed
Content Type
RPM
Test Gating
Builds
1
mod_auth_openidc-2.4.13.2-1.fc38
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
a year ago
in testing
a year ago
in stable
a year ago
approved
a year ago
BZ#2184118 CVE-2023-28625 mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied
0
0
BZ#2184119 CVE-2023-28625 mod_auth_openidc: NULL pointer dereference when `OIDCStripCookies` is set and a crafted cookie supplied [fedora-all]
0
0
mod_auth_openidc-2.4.13.2-1.fc38

Automated Test Results

Copyright © 2007-2024 Red Hat, Inc. and others.

Running bodhi-server 8.1.1 on bodhi-web-163-mqx5g.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •