Summary
[1.8.8-7]
- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
issue exists in URLs with slash and backslash [rhel-7]
[1.8.8-6]
- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
in logout url when using URLs with leading slashes
[rhel-7]
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | mod_auth_openidc | 0:1.8.8-7.el7 |
Vulnerabilities 2
-
Medium 5.8
A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashe…
-
Unscored —
A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backs…