Medium ELSA-2022-1934 1 CVE

Moderate: mod_auth_mellon security update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

[0.14.0-12.1]
- Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
vulnerability in logout URLs [rhel-8]

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	mod_auth_mellon	0:0.14.0-12.el8.1
Oracle Linux · 8	mod_auth_mellon-diagnostics	0:0.14.0-12.el8.1

Vulnerabilities 1

Unscored —

CVE-2021-3639

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an att…

libapache2-mod-auth-mellon libapache2-mod-auth-mellon mod_auth_mellon Debian Ubuntu Azure Linux

Aug 22, 2022