Format: 1.8 Date: Fri, 22 Nov 2019 12:44:27 -0500 Source: libapache2-mod-auth-mellon Binary: libapache2-mod-auth-mellon Architecture: amd64 Version: 0.13.1-1ubuntu0.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libapache2-mod-auth-mellon - SAML 2.0 authentication module for Apache Changes: libapache2-mod-auth-mellon (0.13.1-1ubuntu0.2) bionic-security; urgency=medium . * SECURITY UPDATE: open redirect issue - debian/patches/CVE-2019-13038-1.patch: prevent schemes without hostname in auth_mellon_util.c. - debian/patches/CVE-2019-13038-2.patch: add error message in auth_mellon_util.c. - CVE-2019-13038 Checksums-Sha1: 097be6eb0dd3d02b938262c07b781f205bcdd445 168476 libapache2-mod-auth-mellon-dbgsym_0.13.1-1ubuntu0.2_amd64.ddeb 0559f44b9bbea6974cc7ee1a184102824aee6979 9695 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_amd64.buildinfo 5a9ba2de5a6c52b7629e7d9d2aa436ace2d42edd 59468 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_amd64.deb Checksums-Sha256: f414593a992d29a8fd4c3c7c3b71e7efde84772c450b20da34ed9c3620031a9e 168476 libapache2-mod-auth-mellon-dbgsym_0.13.1-1ubuntu0.2_amd64.ddeb 14918c8ce0e2f6e484849664a8376a5c001f8f93985e198486d373431269af52 9695 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_amd64.buildinfo 6fd2b70c9770703d9fd9c307957d915b9c4f3e9c35c245e452b1a6c5037ee169 59468 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_amd64.deb Files: 23239520275449d02e2f68521e3dd11e 168476 debug optional libapache2-mod-auth-mellon-dbgsym_0.13.1-1ubuntu0.2_amd64.ddeb 7395b52ef0fe4e4f6b8698603f8b70d1 9695 web optional libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_amd64.buildinfo 906cf1b8796bafa45aa896df82dc68fa 59468 web optional libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_amd64.deb Original-Maintainer: Thijs Kinkhorst