Debian: DSA-5405-1: libapache2-mod-auth-openidc security update It was discovered that missing input sanitising in the implementation of the OIDCStripCookie option in mod_auth_openidc could result in denial of service.