Name        : springframework-security
Product     : Fedora 19
Version     : 3.1.7
Release     : 1.fc19
URL         : http://static.springsource.org/spring-security/site/index.html
Summary     : Modular Java/J2EE application security framework
Description :
Spring Security is a Java/Java EE framework that provides advanced
authentication, authorization and other comprehensive security features for
enterprise applications. In addition to having a comprehensive list of
security functionality, Spring Security is very configurable and employs the
Spring Framework for configuration, it allows for reuse and portability of
security components, and it can also be used with non-Spring applications.

-------------------------------------------------------------------------------
-
Update Information:

Security fix for CVE-2014-3527
-------------------------------------------------------------------------------
-
ChangeLog:

* Tue Aug 19 2014 Michal Srb <msrb@redhat.com> - 3.1.7-1
- Update to upstream release 3.1.7
- Resolves: CVE-2014-3527
* Wed Mar 12 2014 Michal Srb <msrb@redhat.com> - 3.1.6-1
- Update to upstream release 3.1.6 (Fixes CVE-2014-0097)
-------------------------------------------------------------------------------
-
References:

  [ 1 ] Bug #1131359 - CVE-2014-3527 Spring Security CAS: Access control bypass
 via untrusted infomation usage in proxy ticket authentication
        https://bugzilla.redhat.com/show_bug.cgi?id=1131359
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program.  Use
su -c 'yum update springframework-security' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce