SUSE-RU-2026:21797-1: moderate: Recommended update for apache2-mod_auth_openidc

[SLE-UPDATES]

# Recommended update for apache2-mod_auth_openidc

Announcement ID: SUSE-RU-2026:21797-1  
Release Date: 2026-05-15T09:27:25Z  
Rating: moderate  
References:

  * jsc#PED-12759
  * jsc#PED-14130

  
Affected Products:

  * SUSE Linux Enterprise Server 16.0
  * SUSE Linux Enterprise Server for SAP applications 16.0

  
  
An update that contains two features can now be installed.

## Description:

This update for apache2-mod_auth_openidc fixes the following issues:

  * version update to 2.4.17.1 (jsc#PED-12759, jsc#PED-14130):
    * fix usage of OIDCSessionType client-cookie:persistent:store_id_token;
    * fix usage of OIDCPreservePostTemplates, regression in 2.4.17;
    * javascript: use HTMLFormElement.prototype.submit.call(document.forms[0]) on all Javascript auto-submit POST forms to prevent browser Javascript error: "form.submit is not a function"
    * metrics: avoid possible segfault after restart twice;
    * code: refactor util.c into util/ directory
    * allow adding a prefix to the cache (section) key through environment variable OIDC_CACHE_PREFIX

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Server for SAP applications 16.0  
    zypper in -t patch SUSE-SLES-16.0-751=1

  * SUSE Linux Enterprise Server 16.0  
    zypper in -t patch SUSE-SLES-16.0-751=1

## Package List:

  * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64)
    * apache2-mod_auth_openidc-2.4.17.1-160000.1.1
    * apache2-mod_auth_openidc-debuginfo-2.4.17.1-160000.1.1
    * apache2-mod_auth_openidc-debugsource-2.4.17.1-160000.1.1
  * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64)
    * apache2-mod_auth_openidc-2.4.17.1-160000.1.1
    * apache2-mod_auth_openidc-debuginfo-2.4.17.1-160000.1.1
    * apache2-mod_auth_openidc-debugsource-2.4.17.1-160000.1.1

## References:

  * https://jira.suse.com/browse/PED-12759
  * https://jira.suse.com/browse/PED-14130

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260527/27720281/attachment.htm>