You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Point mod_auth_openidc to latest release if upgrade is requested (Rocky 8+9) (#95)
Point mod_auth_openidc to latest release if upgrade is requested with `UPGRADE_MOD_AUTH_OPENIDC`, in order to address a potential security issue (CVE-2025-31492) as described in the associated release notes at https://github.com/OpenIDC/mod_auth_openidc/releases/tag/v2.4.16.11 It does NOT sound like we are affected, since we don't adjust the mentioned `OIDCProviderAuthRequestMethod` setting in docker-migrid or migrid. Still, it may make sense to have the option to easily upgrade with the security fix and other recent bug fixes included. **NOTE**: we cannot generally upgrade on CentOS 7 as well, since upstream no longer provides the corresponding packages there without a commercial support contract.
0 commit comments