Bug#945578: buster-pu: package libapache2-mod-auth-openidc/2.3.10.2-1

To: Moritz Schlarb <schlarbm@uni-mainz.de>, 945578@bugs.debian.org
Subject: Bug#945578: buster-pu: package libapache2-mod-auth-openidc/2.3.10.2-1
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Tue, 28 Jan 2020 22:43:25 +0000
Message-id: <[🔎] 3b187eef6b28ea901344d2089dc4ca72dc94d892.camel@adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 945578@bugs.debian.org
In-reply-to: <157484993164.25129.4626987186182709647.reportbug@schlarb-1.zdv.Uni-Mainz.DE>
References: <157484993164.25129.4626987186182709647.reportbug@schlarb-1.zdv.Uni-Mainz.DE> <157484993164.25129.4626987186182709647.reportbug@schlarb-1.zdv.Uni-Mainz.DE>

Control: tags -1 + confirmed

On Wed, 2019-11-27 at 11:18 +0100, Moritz Schlarb wrote:
> Fixes CVE-2019-14857 (Open redirect in logout url when using URLs
> with backslashes) by improving validation of the post-logout URL
> parameter (backported from upstream, see 
> https://salsa.debian.org/debian/libapache2-mod-
> auth-openidc/commit/17e31b94a71ef02d1417bee6b0ef7b7379b40375)
> 

Please go ahead; sorry for the delay.

Regards,

Adam

Reply to:

Prev by Date: Processed: Re: Bug#949921: buster-pu: package uim_1.8.8-4+deb10u3
Next by Date: Processed: Re: Bug#945578: buster-pu: package libapache2-mod-auth-openidc/2.3.10.2-1
Previous by thread: Processed: tagging 950083, tagging 950084
Next by thread: Processed: Re: Bug#945578: buster-pu: package libapache2-mod-auth-openidc/2.3.10.2-1
Index(es):
- Date
- Thread