Lucene search
OracleLinuxELSA-2019-3421HistoryNov 14, 2019 - 12:00 a.m.
mod_auth_mellon security, bug fix, and enhancement update
2019-11-1400:00:00
linux.oracle.com
11
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
[0.14.0-9]
- Just bump the release number
- Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
listings
[0.14.0-8] - Resolves: rhbz#1691894 - [RFE] Config option to change mod_auth_mellon prefix
[0.14.0-7] - Apply the patch from the previous commit
- Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
redirect in logout url when using URLs with
backslashes [rhel-8]
[0.14.0-6] - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
redirect in logout url when using URLs with
backslashes [rhel-8]
[0.14.0-5] - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
bypass in ECP flow [rhel-8.1.0]
[0.14.0-4] - Resolves: rhbz#1702695 - fresh install of mod_auth_mellon shows rpm
verification warnings
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | mod_auth_mellon | < 0.14.0-9.el8 | mod_auth_mellon-0.14.0-9.el8.src.rpm |
| oracle linux | 8 | aarch64 | mod_auth_mellon | < 0.14.0-9.el8 | mod_auth_mellon-0.14.0-9.el8.aarch64.rpm |
| oracle linux | 8 | aarch64 | mod_auth_mellon-diagnostics | < 0.14.0-9.el8 | mod_auth_mellon-diagnostics-0.14.0-9.el8.aarch64.rpm |
| oracle linux | 8 | src | mod_auth_mellon | < 0.14.0-9.el8 | mod_auth_mellon-0.14.0-9.el8.src.rpm |
| oracle linux | 8 | x86_64 | mod_auth_mellon | < 0.14.0-9.el8 | mod_auth_mellon-0.14.0-9.el8.x86_64.rpm |
| oracle linux | 8 | x86_64 | mod_auth_mellon-diagnostics | < 0.14.0-9.el8 | mod_auth_mellon-diagnostics-0.14.0-9.el8.x86_64.rpm |
Related
fedora
fedora
[SECURITY] Fedora 30 Update: mod_auth_mellon-0.14.2-1.fc30
2019-04-10 02:48:32
[SECURITY] Fedora 29 Update: mod_auth_mellon-0.14.0-5.fc29
2019-04-02 02:15:25
debian
debian
[SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update
2019-03-23 18:33:10
[SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update
2019-03-23 18:33:10
nessus
nessus
EulerOS 2.0 SP5 : mod_auth_mellon (EulerOS-SA-2019-1321)
2019-05-01 00:00:00
EulerOS 2.0 SP2 : mod_auth_mellon (EulerOS-SA-2019-1319)
2019-05-01 00:00:00
osv
osv
libapache2-mod-auth-mellon - security update
2019-03-23 00:00:00
libapache2-mod-auth-mellon vulnerabilities
2020-10-22 12:47:17
CVE-2019-3878
2019-03-26 18:29:00
redhat
redhat
(RHSA-2019:0766) Important: mod_auth_mellon security and bug fix update
2019-04-16 14:08:39
(RHSA-2019:0985) Important: mod_auth_mellon security update
2019-05-07 03:40:40
openvas
openvas
Debian: Security Advisory (DSA-4414-1)
2019-03-22 00:00:00
Fedora Update for mod_auth_mellon FEDORA-2019-db1e9b3002
2019-05-07 00:00:00
Huawei EulerOS: Security Advisory for mod_auth_mellon (EulerOS-SA-2019-1319)
2020-01-23 00:00:00
oraclelinux
oraclelinux
mod_auth_mellon security and bug fix update
2019-04-16 00:00:00
mod_auth_mellon security update
2019-07-30 00:00:00
mod_auth_mellon security and bug fix update
2020-04-06 00:00:00
amazon
amazon
Important: mod24_auth_mellon
2019-05-02 17:18:00
Important: mod_auth_mellon
2019-05-16 21:50:00
centos
centos
mod_auth_mellon security update
2019-04-16 19:39:45
ubuntu
ubuntu
mod_auth_mellon vulnerabilities
2019-03-28 00:00:00
mod_auth_mellon vulnerabilities
2020-10-22 00:00:00
veracode
veracode
Authentication Bypass
2019-05-16 03:38:59
Open Redirection
2019-05-16 03:38:59
cve
cve
debiancve
debiancve
ubuntucve
ubuntucve
rosalinux
rosalinux
Advisory ROSA-SA-2021-1921
2021-07-02 17:29:52
Advisory ROSA-SA-2024-2362
2024-02-27 09:20:02
prion
prion
Authentication flaw
2019-03-26 18:29:00
Open redirect
2019-03-27 13:29:00
Open redirect
2019-11-26 12:15:00
redhatcve
redhatcve
CVE-2019-3878
2019-10-08 17:40:31
CVE-2019-3877
2019-03-22 13:49:51
mageia
mageia
Updated apache-mod_auth_openidc packages fix security vulnerability
2019-12-25 22:08:41
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related for ELSA-2019-3421