——————————————————————————–
Fedora Update Notification
FEDORA-2014-3811
2014-03-13 03:06:52
——————————————————————————–
Name : springframework-security
Product : Fedora 20
Version : 3.1.6
Release : 1.fc20
URL : http://static.springsource.org/spring-security/site/index.html
Summary : Modular Java/J2EE application security framework
Description :
Spring Security is a Java/Java EE framework that provides advanced
authentication, authorization and other comprehensive security features for
enterprise applications. In addition to having a comprehensive list of
security functionality, Spring Security is very configurable and employs the
Spring Framework for configuration, it allows for reuse and portability of
security components, and it can also be used with non-Spring applications.
——————————————————————————–
Update Information:
This update fixes CVE-2014-0097.
——————————————————————————–
ChangeLog:
* Wed Mar 12 2014 Michal Srb <msrb@redhat.com> – 3.1.6-1
– Update to upstream release 3.1.6 (Fixes CVE-2014-0097)
——————————————————————————–
References:
[ 1 ] Bug #1075302 – CVE-2014-0097 Spring Framework: empty passwords may bypass authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1075302
——————————————————————————–
This update can be installed with the “yum” update program. Use
su -c ‘yum update springframework-security’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
——————————————————————————–
Fedora Update Notification
FEDORA-2014-3812
2014-03-13 03:06:57
——————————————————————————–
Name : springframework-security
Product : Fedora 19
Version : 3.1.6
Release : 1.fc19
URL : http://static.springsource.org/spring-security/site/index.html
Summary : Modular Java/J2EE application security framework
Description :
Spring Security is a Java/Java EE framework that provides advanced
authentication, authorization and other comprehensive security features for
enterprise applications. In addition to having a comprehensive list of
security functionality, Spring Security is very configurable and employs the
Spring Framework for configuration, it allows for reuse and portability of
security components, and it can also be used with non-Spring applications.
——————————————————————————–
Update Information:
This update fixes CVE-2014-0097.
——————————————————————————–
ChangeLog:
* Wed Mar 12 2014 Michal Srb <msrb@redhat.com> – 3.1.6-1
– Update to upstream release 3.1.6 (Fixes CVE-2014-0097)
——————————————————————————–
References:
[ 1 ] Bug #1075302 – CVE-2014-0097 Spring Framework: empty passwords may bypass authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1075302
——————————————————————————–
This update can be installed with the “yum” update program. Use
su -c ‘yum update springframework-security’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
