Format: 1.8
Date: Wed, 27 Mar 2019 10:58:17 -0300
Source: libapache2-mod-auth-mellon
Binary: libapache2-mod-auth-mellon
Architecture: i386
Version: 0.14.0-1ubuntu0.1
Distribution: cosmic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-024.buildd>
Changed-By: Leonidas S. Barbosa <leo.barbosa@canonical.com>
Description:
 libapache2-mod-auth-mellon - SAML 2.0 authentication module for Apache
Changes:
 libapache2-mod-auth-mellon (0.14.0-1ubuntu0.1) cosmic-security; urgency=medium
 .
   * SECURITY UPDATE: Open redirect in logout
     - debian/patches/CVE-2019-3877.patch: fix in
       auth_mellon_util.c.
     - CVE-2019-3877
   * SECURITY UPDATE: Authentication bypass
     - debian/patches/CVE-2019-3878.patch: fix in
       mod_auth_mellon.c.
     - CVE-2019-3878
Checksums-Sha1:
 1755ceed3347d1f00b95d863853e817fa1607a76 189664 libapache2-mod-auth-mellon-dbgsym_0.14.0-1ubuntu0.1_i386.ddeb
 0689090282303da0f471f860f918d635346cdf3f 8854 libapache2-mod-auth-mellon_0.14.0-1ubuntu0.1_i386.buildinfo
 0d0c9cd1d2ca027fd2256e7581e02a18eefd95de 63548 libapache2-mod-auth-mellon_0.14.0-1ubuntu0.1_i386.deb
Checksums-Sha256:
 d01d2f85e5e930a401fd41397a254ff22328779f6fa79c7b3a0fc71310eba12d 189664 libapache2-mod-auth-mellon-dbgsym_0.14.0-1ubuntu0.1_i386.ddeb
 2f3c8edc570a2224aafd181f0e7f8048d4d4817a3ce6afe0b53fc65b8959ff8b 8854 libapache2-mod-auth-mellon_0.14.0-1ubuntu0.1_i386.buildinfo
 444ad96c424dc548d211ac828a2d09d70bd7cd052c3dc8b43272788afd05f22d 63548 libapache2-mod-auth-mellon_0.14.0-1ubuntu0.1_i386.deb
Files:
 3ae7258f1ea19215644d0c573d11f151 189664 debug optional libapache2-mod-auth-mellon-dbgsym_0.14.0-1ubuntu0.1_i386.ddeb
 a804a59ebac2e21e2f5aa2793bd58ff8 8854 web optional libapache2-mod-auth-mellon_0.14.0-1ubuntu0.1_i386.buildinfo
 f3ddaaf96992b348ed7e88672d611733 63548 web optional libapache2-mod-auth-mellon_0.14.0-1ubuntu0.1_i386.deb
Original-Maintainer: Thijs Kinkhorst <thijs@debian.org>