Format: 1.8
Date: Fri, 22 Nov 2019 12:44:27 -0500
Source: libapache2-mod-auth-mellon
Binary: libapache2-mod-auth-mellon
Architecture: i386
Version: 0.13.1-1ubuntu0.2
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-031.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libapache2-mod-auth-mellon - SAML 2.0 authentication module for Apache
Changes:
 libapache2-mod-auth-mellon (0.13.1-1ubuntu0.2) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: open redirect issue
     - debian/patches/CVE-2019-13038-1.patch: prevent schemes without
       hostname in auth_mellon_util.c.
     - debian/patches/CVE-2019-13038-2.patch: add error message in
       auth_mellon_util.c.
     - CVE-2019-13038
Checksums-Sha1:
 b5cbd5f83169e700de6878bebf4079639f71984e 156372 libapache2-mod-auth-mellon-dbgsym_0.13.1-1ubuntu0.2_i386.ddeb
 98a7cac33be09c118581cfba9f1fd30cbfc82459 9609 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_i386.buildinfo
 9b918494b6c9ab2fa2fa8ae18547e6e5381200ed 61492 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_i386.deb
Checksums-Sha256:
 06562bc2d995215e606cc08f5b113a522d33da72e52f26f6a07fae80945a49b5 156372 libapache2-mod-auth-mellon-dbgsym_0.13.1-1ubuntu0.2_i386.ddeb
 2170d2340f121312dc0db7b3a6ffa9bbdf40200b018de9d3d1e8fae2460f5bfc 9609 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_i386.buildinfo
 d214925c4d2fabf1d86f6cab41d8fb1b27fd56eb2b17fd4ad802ef9c5270f438 61492 libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_i386.deb
Files:
 f4680848693e3de7e943f19006b08cde 156372 debug optional libapache2-mod-auth-mellon-dbgsym_0.13.1-1ubuntu0.2_i386.ddeb
 f56367b2b916f6b567b5eba8d53a42c2 9609 web optional libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_i386.buildinfo
 643855ad314b9415b7462c589b21b830 61492 web optional libapache2-mod-auth-mellon_0.13.1-1ubuntu0.2_i386.deb
Original-Maintainer: Thijs Kinkhorst <thijs@debian.org>