Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 4291-1 Critical: Mod-Auth-Mellon Redirect to Malicious Sites

ubuntu
Calendar Grey February 24, 2020
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-4292-1 addresses a cross-site scripting vulnerability in libapache2-mod-auth-saml, posing risks to user security.
libapache2-mod-auth-mellon could be made to redirect users to malicious sites.

Summary

libapache2-mod-auth-mellon could be made to redirect users to malicious

sites.

Software Description:

- libapache2-mod-auth-mellon: SAML 2.0 authentication module for Apache

Details:

It was discovered that mod_auth_mellon incorrectly handled certain

requests. An attacker could possibly use this issue to redirect a user to a

malicious URL.

Topics%20covered

Topics Covered

security advisory critical ubuntu web threat redirect malicious site libapache2-mod-auth-mellon

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  libapache2-mod-auth-mellon      0.14.2-1ubuntu1.19.10.1

Ubuntu 18.04 LTS:
  libapache2-mod-auth-mellon      0.13.1-1ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4291-1

CVE-2019-13038

Severity
critical
Lowest
Low
Medium
High
Critical

February 24, 2020

Topics%20covered

Topics Covered

security advisory critical ubuntu web threat redirect malicious site libapache2-mod-auth-mellon

Package Information

https://launchpad.net/ubuntu/+source/libapache2-mod-auth-mellon/0.14.2-1ubuntu1.19.10.1
https://launchpad.net/ubuntu/+source/libapache2-mod-auth-mellon/0.13.1-1ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here