Resolves: rhbz#2001647 - CVE-2021-39191 mod_auth_openidc: open redirect
by supplying a crafted URL in the target_link_uri
parameter
(cherry picked from commit e24076b184a68f92e3e99c16750b82d0bd18fc89)
Resolves: rhbz#1986103 - CVE-2021-32786 mod_auth_openidc: open redirect
in oidc_validate_redirect_url()
Resolves: rhbz#1986396 - CVE-2021-32791 mod_auth_openidc: hardcoded
static IV and AAD with a reused key in AES GCM
encryption
Resolves: rhbz#1986398 - CVE-2021-32792 mod_auth_openidc: XSS when using
OIDCPreservePost On
Resolves: rhbz#1805104 - CVE-2019-20479 mod_auth_openidc: open redirect
issue exists in URLs with slash and backslash
[fedora-all]
Resolves: rhbz#1816883 - mod_auth_openidc-2.4.2.1 is available
