Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

Fedora: 25 Springframework-Security Moderate Update: CVE-2016-9879

fedora
Calendar Grey January 12, 2017
Dist Fedora Esm H88
Follow these steps to fix CVE-2016-9879 in springframework-security on Fedora 25: update repositories, search for updates, and upgrade the package
update to 3.2.10.RELEASE, fix CVE-2016-9879

Summary

Spring Security is a Java/Java EE framework that provides advanced

authentication, authorization and other comprehensive security features for

enterprise applications. In addition to having a comprehensive list of

security functionality, Spring Security is very configurable and employs the

Spring Framework for configuration, it allows for reuse and portability of

security components, and it can also be used with non-Spring applications.

Update Information:

update to 3.2.10.RELEASE, fix CVE-2016-9879

Topics%20covered

Topics Covered

security advisory fedora critical fix authentication issue spring security

Change Log

References


[ 1 ] Bug #1409838 - CVE-2016-9879 Spring Security: Improper handling of path parameters allows bypassing the security constraint https://bugzilla.redhat.com/show_bug.cgi?id=1409838

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade springframework-security' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: springframework-security
Product: Fedora 25
Version: 3.2.10
Release: 1.fc25
URL: https://docs.spring.io/spring-security/site/index.html
Summary: Modular Java/J2EE application security framework

Topics%20covered

Topics Covered

security advisory fedora critical fix authentication issue spring security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.