Release date:
2026-10-12 21:12:58 UTC
Description:
- CVE-2026-54789: stop the state-cookie scan at the end of the cookie token so
a state cookie without '=' cannot cause an out-of-bounds read/write
Updated packages:
-
mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els6.aarch64.rpm
sha:575435f49b06a438d70c4d9afe205441cf44d689c7c784925dc905d09aaa0294
-
mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els6.i686.rpm
sha:db173fdf25adaba1da791cc97c09cdebb9db29f70c280b6aea6d4e842d5d1cdc
-
mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els6.x86_64.rpm
sha:14aa9209cfdc9b2e105d3377e8121c93a0add6d6fde9924a90de8062ed5edc85
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
