Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2935-1

Опубликовано: 08 нояб. 2019
Источник: suse-cvrf

Описание

Security update for apache2-mod_auth_openidc

This update for apache2-mod_auth_openidc fixes the following issues:

  • CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes (bsc#1153666).

Список пакетов

SUSE Linux Enterprise Server 12 SP4
apache2-mod_auth_openidc-2.4.0-3.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
apache2-mod_auth_openidc-2.4.0-3.7.1

Ссылки

Описание

A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to CVE-2019-3877 in mod_auth_mellon.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP4:apache2-mod_auth_openidc-2.4.0-3.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-mod_auth_openidc-2.4.0-3.7.1
Ссылки