UbuntuUpdates.org

Package "libapache2-mod-auth-mellon"

Name: libapache2-mod-auth-mellon

Description:

SAML 2.0 authentication module for Apache

Latest version: 0.16.0-1ubuntu0.1
Release: focal (20.04)
Level: security
Repository: main
Homepage: https://github.com/latchset/mod_auth_mellon/

Links


Download "libapache2-mod-auth-mellon"


Other versions of "libapache2-mod-auth-mellon" in Focal

Repository Area Version
base main 0.16.0-1
updates main 0.16.0-1ubuntu0.1

Changelog

Version: 0.16.0-1ubuntu0.1 2021-09-08 13:06:49 UTC

  libapache2-mod-auth-mellon (0.16.0-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: open redirect vulnerability
    - debian/patches/CVE-2021-3639.patch: prevent redirect to URLs that
      begin with /// in auth_mellon_util.c.
    - CVE-2021-3639

 -- Marc Deslauriers <email address hidden> Wed, 04 Aug 2021 10:16:54 -0400

CVE-2021-3639 Prevent redirect to URLs that begin with '///'



About   -   Send Feedback to @ubuntu_updates