Issued:: 2018-04-10
Updated:: 2018-04-10

RHBA-2018:0927 - Bug Fix Advisory

Overview
Updated Packages

Synopsis

mod_auth_mellon bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for mod_auth_mellon is now available for Red Hat Enterprise Linux 7.

Description

The mod_auth_mellon module for the Apache HTTP Server is an authentication service that implements the SAML 2.0 federation protocol. The module grants access based on the attributes received in assertions generated by an IdP server.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

Users of mod_auth_mellon are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
Red Hat Enterprise Linux Server - AUS 7.7 x86_64
Red Hat Enterprise Linux Server - AUS 7.6 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
Red Hat Enterprise Linux Server - TUS 7.7 x86_64
Red Hat Enterprise Linux Server - TUS 7.6 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
Red Hat Enterprise Linux for ARM 64 7 aarch64
Red Hat Enterprise Linux for Power 9 7 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

BZ - 1481332 - Rebase to current upstream
BZ - 1484119 - mod_auth_mellon SIGSEGV in am_urldecode

CVEs

(none)

References

https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux Server - AUS 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux Server - AUS 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux Workstation 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
s390x
mod_auth_mellon-0.13.1-1.el7.s390x.rpm	SHA-256: 050356219a59bbdcd35f1270e0b64bec2afb39dff1e69fc95810b799d8494c3d
mod_auth_mellon-debuginfo-0.13.1-1.el7.s390x.rpm	SHA-256: 76c623108200eef6ede1cb1061c833db22e853896a46a251555494122c3206ab

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
s390x
mod_auth_mellon-0.13.1-1.el7.s390x.rpm	SHA-256: 050356219a59bbdcd35f1270e0b64bec2afb39dff1e69fc95810b799d8494c3d
mod_auth_mellon-debuginfo-0.13.1-1.el7.s390x.rpm	SHA-256: 76c623108200eef6ede1cb1061c833db22e853896a46a251555494122c3206ab

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
s390x
mod_auth_mellon-0.13.1-1.el7.s390x.rpm	SHA-256: 050356219a59bbdcd35f1270e0b64bec2afb39dff1e69fc95810b799d8494c3d
mod_auth_mellon-debuginfo-0.13.1-1.el7.s390x.rpm	SHA-256: 76c623108200eef6ede1cb1061c833db22e853896a46a251555494122c3206ab

Red Hat Enterprise Linux for Power, big endian 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64
mod_auth_mellon-0.13.1-1.el7.ppc64.rpm	SHA-256: 414fd506123dd39ff15d8ee79772ca18600687606e7e099fe6fe57899b8156ea
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64.rpm	SHA-256: 045406591077a9624abd3d547c80f3a05f013de9bb9b66ed0ae67b0fa3ccca6a

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64
mod_auth_mellon-0.13.1-1.el7.ppc64.rpm	SHA-256: 414fd506123dd39ff15d8ee79772ca18600687606e7e099fe6fe57899b8156ea
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64.rpm	SHA-256: 045406591077a9624abd3d547c80f3a05f013de9bb9b66ed0ae67b0fa3ccca6a

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64
mod_auth_mellon-0.13.1-1.el7.ppc64.rpm	SHA-256: 414fd506123dd39ff15d8ee79772ca18600687606e7e099fe6fe57899b8156ea
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64.rpm	SHA-256: 045406591077a9624abd3d547c80f3a05f013de9bb9b66ed0ae67b0fa3ccca6a

Red Hat Enterprise Linux for Power, little endian 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64le
mod_auth_mellon-0.13.1-1.el7.ppc64le.rpm	SHA-256: 249c9f0cc857b720745424431100f0d14a274a773a11326ec9906ec12f55ed7a
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64le.rpm	SHA-256: 3a431e8ee20048f7af60d46b612cb11264a5216b255c7562d78c083c1a7443ba

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64le
mod_auth_mellon-0.13.1-1.el7.ppc64le.rpm	SHA-256: 249c9f0cc857b720745424431100f0d14a274a773a11326ec9906ec12f55ed7a
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64le.rpm	SHA-256: 3a431e8ee20048f7af60d46b612cb11264a5216b255c7562d78c083c1a7443ba

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64le
mod_auth_mellon-0.13.1-1.el7.ppc64le.rpm	SHA-256: 249c9f0cc857b720745424431100f0d14a274a773a11326ec9906ec12f55ed7a
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64le.rpm	SHA-256: 3a431e8ee20048f7af60d46b612cb11264a5216b255c7562d78c083c1a7443ba

Red Hat Enterprise Linux Server - TUS 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux Server - TUS 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
s390x
mod_auth_mellon-0.13.1-1.el7.s390x.rpm	SHA-256: 050356219a59bbdcd35f1270e0b64bec2afb39dff1e69fc95810b799d8494c3d
mod_auth_mellon-debuginfo-0.13.1-1.el7.s390x.rpm	SHA-256: 76c623108200eef6ede1cb1061c833db22e853896a46a251555494122c3206ab

Red Hat Enterprise Linux for ARM 64 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
aarch64
mod_auth_mellon-0.13.1-1.el7.aarch64.rpm	SHA-256: 4e4375cd25497b822013ac972966764adbd5c1b48117cd596e165346f197e5cc
mod_auth_mellon-debuginfo-0.13.1-1.el7.aarch64.rpm	SHA-256: 4999964acc946ae664c0e6e55d600a54a36f33158b2c8e49f681084054f9d0f5

Red Hat Enterprise Linux for Power 9 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64le
mod_auth_mellon-0.13.1-1.el7.ppc64le.rpm	SHA-256: 249c9f0cc857b720745424431100f0d14a274a773a11326ec9906ec12f55ed7a
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64le.rpm	SHA-256: 3a431e8ee20048f7af60d46b612cb11264a5216b255c7562d78c083c1a7443ba

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64le
mod_auth_mellon-0.13.1-1.el7.ppc64le.rpm	SHA-256: 249c9f0cc857b720745424431100f0d14a274a773a11326ec9906ec12f55ed7a
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64le.rpm	SHA-256: 3a431e8ee20048f7af60d46b612cb11264a5216b255c7562d78c083c1a7443ba

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64le
mod_auth_mellon-0.13.1-1.el7.ppc64le.rpm	SHA-256: 249c9f0cc857b720745424431100f0d14a274a773a11326ec9906ec12f55ed7a
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64le.rpm	SHA-256: 3a431e8ee20048f7af60d46b612cb11264a5216b255c7562d78c083c1a7443ba

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
x86_64
mod_auth_mellon-0.13.1-1.el7.x86_64.rpm	SHA-256: 81c660cb20cf7bd01d93b15cad97e2958f41f34f49664baed51f315e7366d0f3
mod_auth_mellon-debuginfo-0.13.1-1.el7.x86_64.rpm	SHA-256: 5012de417854dd5bd8fa0feb8b8d8a8a4378bea9a3113174f047eb2072e46ffd

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
s390x
mod_auth_mellon-0.13.1-1.el7.s390x.rpm	SHA-256: 050356219a59bbdcd35f1270e0b64bec2afb39dff1e69fc95810b799d8494c3d
mod_auth_mellon-debuginfo-0.13.1-1.el7.s390x.rpm	SHA-256: 76c623108200eef6ede1cb1061c833db22e853896a46a251555494122c3206ab

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64
mod_auth_mellon-0.13.1-1.el7.ppc64.rpm	SHA-256: 414fd506123dd39ff15d8ee79772ca18600687606e7e099fe6fe57899b8156ea
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64.rpm	SHA-256: 045406591077a9624abd3d547c80f3a05f013de9bb9b66ed0ae67b0fa3ccca6a

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
mod_auth_mellon-0.13.1-1.el7.src.rpm	SHA-256: 2b367dd2825c0970842fc0fa51fadff59172aed6f34e01e1dbc011071cc5f105
ppc64le
mod_auth_mellon-0.13.1-1.el7.ppc64le.rpm	SHA-256: 249c9f0cc857b720745424431100f0d14a274a773a11326ec9906ec12f55ed7a
mod_auth_mellon-debuginfo-0.13.1-1.el7.ppc64le.rpm	SHA-256: 3a431e8ee20048f7af60d46b612cb11264a5216b255c7562d78c083c1a7443ba

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.