9 Commits (022159aaa906a23cb9fb551f7059d5c1ec4ae534)

 

All Branches   

Search

Author	SHA1	Message	Date
Tomas Halman	022159aaa9	CVE-2023-37464 AES GCM decryption ... AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223307	2 years ago
Tomas Halman	e1ee6d111d	Merge branch 'update-8.9.0-2' into 'stream-mod_auth_openidc-2.3-rhel-8.9.0' ... The access mode and ownership of auth_openidc.conf See merge request redhat/centos-stream/modules/mod_auth_openidc!2	2 years ago
Tomas Halman	286bad58f0	The access mode and ownership of auth_openidc.conf ... Resolves: rhbz#2141850 - auth_openidc.conf mode 0640 by default rhbz#2072469 - Random memory overwrite rhbz#2153659 - CVE-2022-23527 Open Redirect in oidc_validate_redirect_url() using tab character rhbz#2184144 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied	2 years ago
Tomas Halman	60fa81c01d	The access mode and ownership of auth_openidc.conf ... Resolves: rhbz#2141850 - auth_openidc.conf mode 0640 by default	2 years ago
Tomas Halman	b1c7fff203	mod_auth_openidc: NULL pointer dereference ... Resolves: rhbz#2184144 CVE-2023-28625 - mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied	2 years ago
Tomas Halman	e46cb2540f	Merge branch 'update-8.9.0' into 'stream-mod_auth_openidc-2.3-rhel-8.9.0' ... mod_auth_openidc update See merge request redhat/centos-stream/modules/mod_auth_openidc!1	2 years ago
Tomas Halman	e6cc8faf14	mod_auth_openidc update ... Resolves: rhbz#2072469 - cjose random memory override Resolves: rhbz#2153659 - CVE-2022-23527 Open Redirect in oidc_validate_redirect_url() using tab character	2 years ago
Adam Samalik	4466857bfd	update refs	2 years ago
Adam Samalik	a80ce31501	update modulemd etc	2 years ago