title: Red Hat Security Advisory: mod_auth_openidc:2.3 security update
description: cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE
cpes: cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_e4s:8.4::appstream cpe:/a:redhat:rhel_tus:8.4::appstream