Back Linuxsecurity

SUSE: Apache2 Mod Auth OpenID Connect Important Security Update 2025:4532

Linuxsecurity •LinuxSecurity Advisories • December 29, 2025

## This update for apache2-mod_auth_openidc fixes the following issues: * Update to 2.4.17.1 (bsc#1248806 / PED-14130). * Remove many patches, as they've been merged upstream. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4532=1 SUSE-2025-4532=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-4532=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-4532=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) Read the Full Advisory

* bsc#1248806 * jsc#PED-14130 Cross- * CVE-2019-14857 * CVE-2019-20479 * CVE-2021-32785 * CVE-2021-32786 * CVE-2021-32791 * CVE-2021-32792 * CVE-2021-39191 * CVE-2022-23527 * CVE-2023-28625 * CVE-2024-24814 * CVE-2025-31492 * CVE-2025-3891 CVSS scores: * CVE-2019-14857 ( SUSE ): 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2019-14857 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2019-14857 ( NVD ): 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2019-20479 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2019-20479 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2021-32785 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Read the Full Advisory

* CVE-2019-14857 ( SUSE ): 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

* CVE-2019-14857 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

* CVE-2019-14857 ( NVD ): 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

* CVE-2019-20479 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

* CVE-2019-20479 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

* CVE-2021-32785 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Read the Full Advisory

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Releases Security Update for apache2-mod_auth_openidc SUSE has issued an important security update for apache2-mod_auth_openidc, addressing issues related to version 2.4.17.1. The update includes the removal of numerous patches that have been integrated upstream. Users are advised to apply the update using SUSE's recommended installation methods. 2 sources 22

Extracted Entities

CVEs (12)

CVE-2019-14857 CVE-2019-20479 CVE-2021-32785 CVE-2021-32786 CVE-2021-32791 CVE-2021-32792 CVE-2021-39191 CVE-2022-23527 CVE-2023-28625 CVE-2024-24814 CVE-2025-31492 CVE-2025-3891