rpms/mod_auth_mellon
7
0
Fork 0
Code Issues Pull Requests Releases Activity
b1f3f2443c
mod_auth_mellon/sources

2 lines
64 B
Plaintext
Raw Normal View History

Update to new upstream 0.12.0 - [CVE-2016-2145] Fix DOS attack (Apache worker process crash) due to incorrect error handling when reading POST data from client. - [CVE-2016-2146] Fix DOS attack (Apache worker process crash / resource exhaustion) due to missing size checks when reading POST data. In addition this release contains the following new features and fixes: - Add MellonRedirectDomains option to limit the sites that mod_auth_mellon can redirect to. This option is enabled by default. - Add support for ECP service options in PAOS requests. - Fix AssertionConsumerService lookup for PAOS requests.
2016-03-09 14:40:05 +00:00
6c1057847c06d433d4d4a4f55cca1740 mod_auth_mellon-0.12.0.tar.gz
Reference in New Issue Copy Permalink