MGASA-2026-0381
- Source
- https://advisories.mageia.org/MGASA-2026-0381.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0381.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0381
- Upstream
- Published
- 2026-09-07T18:46:11Z
- Modified
- 2026-09-07T19:00:02Z
- Summary
- Updated apache-mod_auth_openidc packages fix a security vulnerability
- Details
-
Out-of-bounds read and write in state cookie parsing. (CVE-2026-54789)
- References
-
- https://advisories.mageia.org/MGASA-2026-0381.html
- https://bugs.mageia.org/show_bug.cgi?id=36209
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/DJLYJS22XN3IFTMN7F46SPHFLF7J6355/
- https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-vgr5-qcpp-x2pr
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / apache-mod_auth_openidc
Package
- Name
- apache-mod_auth_openidc
- Purl
- pkg:rpm/mageia/apache-mod_auth_openidc?arch=source&distro=mageia-10
Mageia:9 / apache-mod_auth_openidc
Package
- Name
- apache-mod_auth_openidc
- Purl
- pkg:rpm/mageia/apache-mod_auth_openidc?arch=source&distro=mageia-9