Lucene search

K
oraclelinuxOracleLinuxELSA-2019-0766
HistoryApr 16, 2019 - 12:00 a.m.

mod_auth_mellon security and bug fix update

2019-04-1600:00:00
linux.oracle.com
43

0.018 Low

EPSS

Percentile

88.1%

[0.14.0-2.4]

  • Actually apply the patch in the previous build
  • Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
    in logout url when using URLs with backslashes
    [0.14.0-2.3]
  • Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
    in logout url when using URLs with backslashes
    [rhel-7] [rhel-7.6.z]
    [0.14.0-2.2]
  • Resolves: rhbz#1697487 - mod_auth_mellon Cert files name wrong when
    hostname contains a number
    [0.14.0-2.1]
  • Resolves: rhbz#1692455 - CVE-2019-3878 mod_auth_mellon: authentication
    bypass in ECP flow [rhel-7.6.z]