Catálogo de CVE

CVE-2021-3639

libapache2-mod-auth-mellon affected and fixed versions

[Catálogo de CVE]

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.

Gravidade
Medium · CVSS 6.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.03% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixielibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debiantrixielibapache2-mod-auth-mellon0.19.1-1Fixed[CVE-2021-3639]
Debiansidlibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debiansidlibapache2-mod-auth-mellon0.19.1-1.1Fixed[CVE-2021-3639]
Debianforkylibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debianforkylibapache2-mod-auth-mellon0.19.1-1.1Fixed[CVE-2021-3639]
Debianbookwormlibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debianbookwormlibapache2-mod-auth-mellon0.18.1-1Fixed[CVE-2021-3639]

Showing 8 fix observations. All 39 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormlibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debianbookwormlibapache2-mod-auth-mellon0.18.1-1Fixed[CVE-2021-3639]
Debianforkylibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debianforkylibapache2-mod-auth-mellon0.19.1-1.1Fixed[CVE-2021-3639]
Debiansidlibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debiansidlibapache2-mod-auth-mellon0.19.1-1.1Fixed[CVE-2021-3639]
Debiantrixielibapache2-mod-auth-mellon0.18.0-1FixedDistribution-reported fixed boundary[CVE-2021-3639]
Debiantrixielibapache2-mod-auth-mellon0.19.1-1Fixed[CVE-2021-3639]
Opensuseleap 15.3apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Opensuseleap 15.4apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Opensusetumbleweedapache2-mod_auth_mellon0.19.0-1.1UnknownSource applicability is not established[OPENSUSE-SU-2024:13848-1]
Suseenterprise storage 7apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Suselinux enterprise high performance computing 15 sp2-esposapache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Suselinux enterprise high performance computing 15 sp2-ltssapache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Suselinux enterprise module for server applications 15 sp3apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Suselinux enterprise real time 15 sp2apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Suselinux enterprise server 12 sp5apache2-mod_auth_mellon0.16.0-8.6.1UnknownSource applicability is not established[SUSE-SU-2021:2912-1]
Suselinux enterprise server 15 sp2-bclapache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Suselinux enterprise server 15 sp2-ltssapache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Suselinux enterprise server for sap applications 12 sp5apache2-mod_auth_mellon0.16.0-8.6.1UnknownSource applicability is not established[SUSE-SU-2021:2912-1]
Suselinux enterprise server for sap applications 15 sp2apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Susemanager proxy 4.1apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Susemanager retail branch server 4.1apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Susemanager server 4.1apache2-mod_auth_mellon0.17.0-150200.5.7.1UnknownSource applicability is not established[SUSE-SU-2022:1524-1]
Ubuntu16.04libapache2-mod-auth-mellon0.10.0-1UnknownSource applicability is not established[UBUNTU-CVE-2021-3639]
Ubuntu16.04libapache2-mod-auth-mellon0.11.0-1UnknownSource applicability is not established[UBUNTU-CVE-2021-3639]
Ubuntu16.04libapache2-mod-auth-mellon0.12.0-1UnknownSource applicability is not established[UBUNTU-CVE-2021-3639]
Ubuntu16.04libapache2-mod-auth-mellon0.12.0-2+deb9u1build0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-3639]
Ubuntu18.04libapache2-mod-auth-mellon0.13.1-1UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu18.04libapache2-mod-auth-mellon0.13.1-1build1UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu18.04libapache2-mod-auth-mellon0.13.1-1build2UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu18.04libapache2-mod-auth-mellon0.13.1-1ubuntu0.1UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu18.04libapache2-mod-auth-mellon0.13.1-1ubuntu0.2UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu18.04libapache2-mod-auth-mellon0.13.1-1ubuntu0.3UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu20.04libapache2-mod-auth-mellon0.14.2-1ubuntu1UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu20.04libapache2-mod-auth-mellon0.14.2-1ubuntu2UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu20.04libapache2-mod-auth-mellon0.16.0-1UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu20.04libapache2-mod-auth-mellon0.16.0-1ubuntu0.1UnknownSource applicability is not established[USN-5069-1][UBUNTU-CVE-2021-3639]
Ubuntu22.04libapache2-mod-auth-mellon0.17.0-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-3639]
Original provider fields
{
  "package_releases": [
    {
      "name": "libapache2-mod-auth-mellon",
      "status": "fixed",
      "release": "sid",
      "version": "0.19.1-1.1"
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "status": "fixed",
      "release": "forky",
      "version": "0.19.1-1.1"
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "status": "fixed",
      "release": "trixie",
      "version": "0.19.1-1"
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "status": "fixed",
      "release": "bookworm",
      "version": "0.18.1-1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 991730,
      "name": "libapache2-mod-auth-mellon",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "0.18.0-1"
    },
    {
      "bug": 991730,
      "name": "libapache2-mod-auth-mellon",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "0.18.0-1"
    },
    {
      "bug": 991730,
      "name": "libapache2-mod-auth-mellon",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "0.18.0-1"
    },
    {
      "bug": 991730,
      "name": "libapache2-mod-auth-mellon",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "0.18.0-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "libapache2-mod-auth-mellon",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.13.1-1ubuntu0.3"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "0.13.1-1",
        "0.13.1-1build1",
        "0.13.1-1build2",
        "0.13.1-1ubuntu0.1",
        "0.13.1-1ubuntu0.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5069-1",
      "fixed_version": "0.13.1-1ubuntu0.3",
      "provider_source": "pypi",
      "provider_record_id": "USN-5069-1",
      "provider_updated_at": "2026-04-27T15:55:04.487057Z",
      "applicability_unknown": true
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.14.2-1ubuntu1",
        "0.14.2-1ubuntu2",
        "0.16.0-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5069-1",
      "fixed_version": "0.16.0-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-5069-1",
      "provider_updated_at": "2026-04-27T15:55:04.487057Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.19.0-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:13848-1",
      "fixed_version": "0.19.0-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:13848-1",
      "provider_updated_at": "2026-02-04T04:29:38.431151Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-8.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2912-1",
      "fixed_version": "0.16.0-8.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2912-1",
      "provider_updated_at": "2026-02-04T04:24:41.824417Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-8.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2912-1",
      "fixed_version": "0.16.0-8.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2912-1",
      "provider_updated_at": "2026-02-04T04:24:41.824417Z",
      "applicability_unknown": true
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.10.0-1",
        "0.11.0-1",
        "0.12.0-1",
        "0.12.0-2+deb9u1build0.16.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3639",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3639",
      "provider_updated_at": "2026-02-04T03:40:54.478355Z",
      "applicability_unknown": true
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.13.1-1ubuntu0.3"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "0.13.1-1",
        "0.13.1-1build1",
        "0.13.1-1build2",
        "0.13.1-1ubuntu0.1",
        "0.13.1-1ubuntu0.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3639",
      "fixed_version": "0.13.1-1ubuntu0.3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3639",
      "provider_updated_at": "2026-02-04T03:40:54.478355Z",
      "applicability_unknown": true
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.14.2-1ubuntu1",
        "0.14.2-1ubuntu2",
        "0.16.0-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3639",
      "fixed_version": "0.16.0-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3639",
      "provider_updated_at": "2026-02-04T03:40:54.478355Z",
      "applicability_unknown": true
    },
    {
      "name": "libapache2-mod-auth-mellon",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-1ubuntu1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3639",
      "fixed_version": "0.17.0-1ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3639",
      "provider_updated_at": "2026-02-04T03:40:54.478355Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise real time 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "manager server 4.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-mod_auth_mellon",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.0-150200.5.7.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:1524-1",
      "fixed_version": "0.17.0-150200.5.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:1524-1",
      "provider_updated_at": "2026-02-04T02:59:37.459376Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #991730]

OpenFactory catalog packages

A associação de pacotes está em andamento.

[Debian 12 (Bookworm)]

  • [libapache2-mod-auth-mellon]Desconhecido
    Detalhes (2)

    • 0.18.1-1 · amd64 · bookworm

      Corrigida · Corrigida: 0.18.0-1

      dsa · libapache2-mod-auth-mellon · debian · bookworm; dsa · libapache2-mod-auth-mellon · debian · 12

    • 0.18.1-1 · arm64 · bookworm

      Corrigida · Corrigida: 0.18.0-1

      dsa · libapache2-mod-auth-mellon · debian · bookworm; dsa · libapache2-mod-auth-mellon · debian · 12

[Debian 13 (Trixie)]

  • [libapache2-mod-auth-mellon]Desconhecido

    Pacote fonte: [libapache2-mod-auth-mellon]

    Detalhes (2)

    • 0.19.1-1 · amd64 · trixie

      Corrigida · Corrigida: 0.18.0-1

      dsa · libapache2-mod-auth-mellon · debian · 13

    • 0.19.1-1+b1 · arm64 · trixie

      Corrigida · Corrigida: 0.18.0-1

      dsa · libapache2-mod-auth-mellon · debian · 13

[openSUSE Tumbleweed]

Observado:

Referências

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]