UbuntuUpdates.org

Package "libapache2-mod-auth-openidc"

Name: libapache2-mod-auth-openidc

Description:

OpenID Connect Relying Party implementation for Apache
Latest version: 2.4.15.1-1ubuntu0.1
Release: noble (24.04)
Level: security
Repository: universe
Homepage: https://github.com/zmartzone/mod_auth_openidc

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libapache2-mod-auth-openidc"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libapache2-mod-auth-openidc" in Noble

Repository Area Version
base universe 2.4.15.1-1build3
updates universe 2.4.15.1-1ubuntu0.1

Changelog

Version: 2.4.15.1-1ubuntu0.1 2025-04-23 16:07:29 UTC

  libapache2-mod-auth-openidc (2.4.15.1-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Data leak (LP: #2106320)
    - debian/patches/CVE-2025-31492.patch: fix OIDCProviderAuthRequestMethod
    POST
    - CVE-2025-31492

 -- Eduardo Barretto <email address hidden> Mon, 14 Apr 2025 19:23:44 +0200
2106320 OIDCProviderAuthRequestMethod POST leaks protected data
CVE-2025-31492 mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Rel


About   -   Send Feedback to @ubuntu_updates