Linux · Security advisory · June 23, 2025

RHSA-2025:9396: mod_auth_openidc security update

RHSA-2025:9396, released June 23, 2025, fixes 1 CVE in mod_auth_openidc (version 0:2.4.10-1.el9_6.2). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0160
75th percentile

Fixed package versions

ProductReleaseFixed in
mod_auth_openidcRHEL 90:2.4.10-1.el9_6.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-3891 apache2-mod_auth_openidc: This update for apache2-mod_auth_openidc fixes the following issues: - Update to 2.4.17.1 (bsc#1248806 / PED-14130).... 7.5 0.0160 None reported
Showing 1 to 1 of 1 1