From 06e46dcdfabb3aa63bbb532dd48733cedf2e96f8 Mon Sep 17 00:00:00 2001 From: Tomas Halman Date: Thu, 16 May 2024 09:16:25 +0200 Subject: [PATCH] CVE-2024-24814 and race condition in cache handling Resolves: RHEL-36492 Race condition in mod_auth_openidc filecache Resolves: RHEL-25421 mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814)