Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 615
Alerts This Week
Warning Icon 1 615

Ubuntu 16.04 LTS: USN-7139-1 critical: Apache Shiro remote access risk

ubuntu
Calendar Grey December 5, 2024
Scroller Ubuntu
Uncover essential news regarding the Apache Shiro flaw impacting Ubuntu 16.04 LTS, including potential risk levels and suggested mitigation strategies.
Apache Shiro could be made to run programs or expose sensitive information over the network.

Summary

Apache Shiro could be made to run programs or expose sensitive information

over the network.

Software Description:

- shiro: Powerful and easy-to-use Java security framework

Details:

It was discovered that Apache Shiro used a static cipher within the

"Remember Me" feature inside authentication by default. An attacker could

possibly use this issue to achieve remote code execution or obtain

sensitive information.

Topics%20covered

Topics Covered

security advisory security update remote code execution Ubuntu sensitive information network exposure shiro

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
   libshiro-java                   1.2.4-1ubuntu0.1~esm1
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7139-1

  CVE-2016-4437

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7139-1

Topics%20covered

Topics Covered

security advisory security update remote code execution Ubuntu sensitive information network exposure shiro

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.