High DSA-4414-1 2 CVEs

libapache2-mod-auth-mellon - security update

Published Mar 23, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	libapache2-mod-auth-mellon	0.12.0-2+deb9u1

Vulnerabilities 2

High 8.1

CVE-2019-3878

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_me…

uninett mod_auth_mellon libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Mar 26, 2019
Medium 5.8

CVE-2019-3877

A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL allows requests with ba…

uninett mod_auth_mellon libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Mar 27, 2019