FEDORA-2019-2d8ee47f61 — security update for mod_auth_mellon

FEDORA-2019-2d8ee47f61 created by jhrozek 9 months ago for Fedora 30

stable

New upstream release 0.14.2 which also fixes CVE-2019-3878 and CVE-2019-3877

sudo dnf upgrade --advisory=FEDORA-2019-2d8ee47f61

This update has been submitted for testing by jhrozek.

This update has been pushed to testing.

This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for batched by pwalter.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

9 months ago

in testing

9 months ago

in stable

8 months ago

BZ#1674418 mod_auth_mellon-0.14.2 is available

BZ#1691127 mod_auth_mellon: authentication bypass in ECP flow [fedora-all]

BZ#1691136 CVE-2019-3878 mod_auth_mellon: authentication bypass in ECP flow [fedora-all]

BZ#1691771 CVE-2019-3877 mod_auth_mellon: open redirect in logout url when using URLs with backslashes [fedora-all]