Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in springframework-security
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in springframework-security
ID: FEDORA-2014-3812
Distribution: Fedora
Plattformen: Fedora 19
Datum: Fr, 21. März 2014, 16:35
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0097
Applikationen: springframework-security

Originalnachricht

Name        : springframework-security
Product : Fedora 19
Version : 3.1.6
Release : 1.fc19
URL : http://static.springsource.org/spring-security/site/index.html
Summary : Modular Java/J2EE application security framework
Description :
Spring Security is a Java/Java EE framework that provides advanced
authentication, authorization and other comprehensive security features for
enterprise applications. In addition to having a comprehensive list of
security functionality, Spring Security is very configurable and employs the
Spring Framework for configuration, it allows for reuse and portability of
security components, and it can also be used with non-Spring applications.

-------------------------------------------------------------------------------
-
Update Information:

This update fixes CVE-2014-0097.
-------------------------------------------------------------------------------
-
ChangeLog:

* Wed Mar 12 2014 Michal Srb <msrb@redhat.com> - 3.1.6-1
- Update to upstream release 3.1.6 (Fixes CVE-2014-0097)
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1075302 - CVE-2014-0097 Spring Framework: empty passwords may
bypass authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1075302
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update springframework-security' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Unterstützer werden
Neue Nachrichten
Werbung