High ELSA-2019-0985 1 CVE

Important: mod_auth_mellon security update (Oracle Linux 8)

Published Jul 30, 2019 · Updated Jul 30, 2019

Ecosystem: Oracle Linux

Summary

[0.14.0-3.2]
- Resolves: rhbz#1696197 - CVE-2019-3878 mod_auth_mellon: authentication
bypass in ECP flow [rhel-8.0.0.z]

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	mod_auth_mellon	0:0.14.0-3.el8_0.2

Vulnerabilities 1

High 8.1

CVE-2019-3878

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_me…

uninett mod_auth_mellon libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Mar 26, 2019