Name : mod_auth_mellon Product : Fedora 23 Version : 0.11.1 Release : 1.fc23 URL : https://github.com/UNINETT/mod_auth_mellon Summary : A SAML 2.0 authentication module for the Apache Httpd Server Description : The mod_auth_mellon module is an authentication service that implements the SAML 2.0 federation protocol. It grants access based on the attributes received in assertions generated by a IdP server.
[CVE-2016-2145] Fix DOS attack (Apache worker process crash) due to incorrect error handling when reading POST data from client. [CVE-2016-2146] Fix DOS attack (Apache worker process crash resource exhaustion) due to missing size checks when reading POST data. ------------------------------------------------------------------------------- - References:
This update can be installed with the "yum" update program. Use su -c 'yum update mod_auth_mellon' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/.