# libapache2-mod-auth-openidc security updates

Patch Radar has 25 security fixes for libapache2-mod-auth-openidc, closing 6 CVEs. The newest is DEBIAN-CVE-2026-54789 (2.4.19.4-1), released August 21, 2026.

- Web page: https://patchblox.com/security/product/linux/libapache2-mod-auth-openidc
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-54789](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54789.md) | Aug 21, 2026 | Debian 14 2.4.19.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-54789](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54789.md) | Aug 21, 2026 | Debian 12.15 (bookworm) 2.4.12.3-2+deb12u5 | High | 1 | 0 |
| [DEBIAN-CVE-2026-54789](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54789.md) | Aug 21, 2026 | Debian 13.5 (trixie) 2.4.17-1+deb13u1 | High | 1 | 0 |
| [libapache2-mod-auth-openidc 2.4.16.10-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libapache2-mod-auth-openidc-2.4.16.10-1ubuntu1.md) | Jan 16, 2026 | Ubuntu 25.04 (plucky) 2.4.16.10-1ubuntu1 | High | 1 | 0 |
| [libapache2-mod-auth-openidc 2.4.15.7-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libapache2-mod-auth-openidc-2.4.15.7-2ubuntu0.1.md) | Jan 16, 2026 | Ubuntu 24.10 (oracular) 2.4.15.7-2ubuntu0.1 | High | 1 | 0 |
| [DLA-4155-1](https://patchblox.com/security/data/fix/linux/dla-4155-1.md) | May 8, 2025 | Debian 11.6 (bullseye) 2.4.9.4-0+deb11u6 | High | 1 | 0 |
| [DSA-5917-1](https://patchblox.com/security/data/fix/linux/dsa-5917-1.md) | May 8, 2025 | Debian 12.15 (bookworm) 2.4.12.3-2+deb12u4 | High | 1 | 0 |
| [DEBIAN-CVE-2025-3891](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3891.md) | Apr 29, 2025 | Debian 13.5 (trixie) 2.4.14.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-3891](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3891.md) | Apr 29, 2025 | Debian 14 2.4.14.2-1 | High | 1 | 0 |
| [DLA-4129-1](https://patchblox.com/security/data/fix/linux/dla-4129-1.md) | Apr 17, 2025 | Debian 11.6 (bullseye) 2.4.9.4-0+deb11u5 | High | 1 | 0 |
| [DSA-5904-1](https://patchblox.com/security/data/fix/linux/dsa-5904-1.md) | Apr 17, 2025 | Debian 12.15 (bookworm) 2.4.12.3-2+deb12u3 | High | 1 | 0 |
| [DEBIAN-CVE-2025-31492](https://patchblox.com/security/data/fix/linux/debian-cve-2025-31492.md) | Apr 6, 2025 | Debian 13.5 (trixie) 2.4.16.11-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-31492](https://patchblox.com/security/data/fix/linux/debian-cve-2025-31492.md) | Apr 6, 2025 | Debian 14 2.4.16.11-1 | High | 1 | 0 |
| [libapache2-mod-auth-openidc 2.4.11-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libapache2-mod-auth-openidc-2.4.11-1ubuntu0.1.md) | Apr 6, 2025 | Ubuntu 22.04.1 LTS (jammy) 2.4.11-1ubuntu0.1 | High | 1 | 0 |
| [libapache2-mod-auth-openidc 2.4.15.1-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libapache2-mod-auth-openidc-2.4.15.1-1ubuntu0.1.md) | Apr 6, 2025 | Ubuntu 24.04.5 LTS (noble) 2.4.15.1-1ubuntu0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-24814](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24814.md) | Feb 13, 2024 | Debian 12.15 (bookworm) 2.4.12.3-2+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-24814](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24814.md) | Feb 13, 2024 | Debian 13.5 (trixie) 2.4.15.7-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-24814](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24814.md) | Feb 13, 2024 | Debian 14 2.4.15.7-1 | High | 1 | 0 |
| [DSA-5405-1](https://patchblox.com/security/data/fix/linux/dsa-5405-1.md) | May 18, 2023 | Debian 11.6 (bullseye) 2.4.9.4-0+deb11u3 | High | 1 | 0 |
| [DEBIAN-CVE-2023-28625](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28625.md) | Apr 3, 2023 | Debian 12.15 (bookworm) 2.4.12.3-2 | High | 1 | 0 |
| [DEBIAN-CVE-2023-28625](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28625.md) | Apr 3, 2023 | Debian 13.5 (trixie) 2.4.12.3-2 | High | 1 | 0 |
| [DEBIAN-CVE-2023-28625](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28625.md) | Apr 3, 2023 | Debian 14 2.4.12.3-2 | High | 1 | 0 |
| [DEBIAN-CVE-2022-23527](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23527.md) | Dec 14, 2022 | Debian 12.15 (bookworm) 2.4.12.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-23527](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23527.md) | Dec 14, 2022 | Debian 13.5 (trixie) 2.4.12.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-23527](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23527.md) | Dec 14, 2022 | Debian 14 2.4.12.2-1 | High | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo