[ubuntu/eoan-security] libapache2-mod-auth-mellon 0.14.2-1ubuntu1.19.10.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Feb 24 14:25:18 UTC 2020
libapache2-mod-auth-mellon (0.14.2-1ubuntu1.19.10.1) eoan-security; urgency=medium
* SECURITY UPDATE: open redirect issue
- debian/patches/CVE-2019-13038-1.patch: prevent schemes without
hostname in auth_mellon_util.c.
- debian/patches/CVE-2019-13038-2.patch: add error message in
auth_mellon_util.c.
- CVE-2019-13038
Date: 2019-11-22 18:29:13.725811+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libapache2-mod-auth-mellon/0.14.2-1ubuntu1.19.10.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Eoan-changes
mailing list