advisories/26289.adv

type: security
subject: Updated apache-mod_auth_openidc packages fix security vulnerability
CVE:
 - CVE-2019-20479
src:
  7:
   core:
     - apache-mod_auth_openidc-2.3.2-2.2.mga7
description: |
  The updated package fixes a security vulnerability:

  A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect
  issue exists in URLs with a slash and backslash at the beginning. 
  (CVE-2019-20479)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=26289
 - https://www.debian.org/lts/security/2020/dla-2130
ID: MGASA-2020-0129
1	type: security
2	subject: Updated apache-mod_auth_openidc packages fix security vulnerability
3	CVE:
4	- CVE-2019-20479
5	src:
6	7:
7	core:
8	- apache-mod_auth_openidc-2.3.2-2.2.mga7
9	description: \|
10	The updated package fixes a security vulnerability:
11
12	A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect
13	issue exists in URLs with a slash and backslash at the beginning.
14	(CVE-2019-20479)
15	references:
16	- https://bugs.mageia.org/show_bug.cgi?id=26289
17	- https://www.debian.org/lts/security/2020/dla-2130
18	ID: MGASA-2020-0129