Linux · Security advisory · July 30, 2019

ELSA-2019-0985: mod_auth_mellon security update

ELSA-2019-0985, released July 30, 2019, fixes 1 CVE in mod_auth_mellon (version 0:0.14.0-3.el8_0.2). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0297
87th percentile

Fixed package versions

ProductReleaseFixed in
mod_auth_mellonol 80:0.14.0-3.el8_0.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-3878 mod_auth_mellon: The mod_auth_mellon module for the Apache HTTP Server is an authentication service that implements the SAML 2.0 feder... 8.1 0.0297 None reported
Showing 1 to 1 of 1 1