Skip to content

Commit 0880f10

Browse files
committed
Bump mod_auth_openidc to latest release to address security issues. Also bumped
cjose dependency to latest release with fixes to a bunch of security issues there.
1 parent 4c983b5 commit 0880f10

1 file changed

Lines changed: 6 additions & 5 deletions

File tree

Dockerfile.rocky9

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -533,16 +533,17 @@ RUN if [ "$ENABLE_OPENID" = "True" ]; then \
533533
fi;
534534

535535

536-
# Upgrade mod_auth_openidc from upstream github packages if requested - mainly needed for rhel/centos7
537-
# https://stackoverflow.com/questions/68742362/how-to-install-mod-auth-openidc-on-rhel-7
536+
# Upgrade mod_auth_openidc from upstream github packages if requested - mainly
537+
# needed for most recent security fixes.
538538
# The module requires a recent cjose library version. Packaged versions are
539539
# also available on the upstream releases page under the 2.4.0 release Assets.
540-
# Version 2.4.12.1+ is needed to support the OIDCPassClaimsAs encoding setting in apache conf
540+
# Version 2.4.12.1+ is needed to support the OIDCPassClaimsAs encoding setting
541+
# in apache conf.
541542
RUN echo "UPGRADE_MOD_AUTH_OPENIDC: $UPGRADE_MOD_AUTH_OPENIDC"
542543
RUN if [ "$UPGRADE_MOD_AUTH_OPENIDC" = "True" ]; then \
543544
if [ -z "${UPGRADE_OIDC_AUTH_MOD_SRC}" ]; then \
544545
echo "upgrading mod_auth_openidc from upstream release package"; \
545-
UPGRADE_OIDC_AUTH_MOD_SRC="https://github.com/OpenIDC/mod_auth_openidc/releases/download/v2.4.19.3/mod_auth_openidc-2.4.19.3-1.el9.x86_64.rpm"; \
546+
UPGRADE_OIDC_AUTH_MOD_SRC="https://github.com/OpenIDC/mod_auth_openidc/releases/download/v2.4.19.4/mod_auth_openidc-2.4.19.4-1.el9.x86_64.rpm"; \
546547
else \
547548
echo "upgrading mod_auth_openidc from ${UPGRADE_OIDC_AUTH_MOD_SRC}"; \
548549
fi; \
@@ -551,7 +552,7 @@ RUN if [ "$UPGRADE_MOD_AUTH_OPENIDC" = "True" ]; then \
551552
#echo "installing cjose dependency from OS package"; \
552553
#UPGRADE_OIDC_CJOSE_SRC="cjose"; \
553554
echo "upgrading cjose from upstream release package"; \
554-
UPGRADE_OIDC_CJOSE_SRC="https://github.com/OpenIDC/cjose/releases/download/v0.6.2.4/cjose-0.6.2.4-2.el9.x86_64.rpm"; \
555+
UPGRADE_OIDC_CJOSE_SRC="https://github.com/OpenIDC/cjose/releases/download/v0.6.2.7/cjose-0.6.2.7-1.el9.x86_64.rpm"; \
555556
else \
556557
echo "upgrading cjose from ${UPGRADE_OIDC_CJOSE_SRC}"; \
557558
fi; \

0 commit comments

Comments
 (0)