Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisorymoderatesecurity issueFedora 26: FEDORA-2017-d452f83821 High: Django SQL Injection Risk
Update to 3.2.18.RELEASE. Resolves: CVE-2016-9878 (rhbz#1408164,1408165). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-f341d71730 2017-01-01 18:36:12.605457 -------------------------------------------------------------------------------- Name : springframework Product : Fedora 25 Version : 3.2.18 Release : 1.fc25 URL : https://spring.io/projects/spring-framework/ Summary : Spring Java Application Framework Description : Spring is a layered Java/J2EE application framework, based on code published in Expert One-on-One J2EE Design and Development by Rod Johnson (Wrox, 2002). -------------------------------------------------------------------------------- Update Information: Update to 3.2.18.RELEASE. Resolves: CVE-2016-9878 (rhbz#1408164,1408165) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1408164 - CVE-2016-9878 Spring Framework: Directory Traversal in the Spring Framework ResourceServlet https://bugzilla.redhat.com/show_bug.cgi?id=1408164 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade springframework' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jan 01, 2017
•Important
Fedora
89
security advisoryFedorasecurity fixUbuntu 20.04: UBUNTU-2021-9300124780 High: Unrestricted File Upload
Security fix for CVE-2015-5211. Update to 3.2.15.RELEASE. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-693035254a 2015-11-01 18:14:58.630611 -------------------------------------------------------------------------------- Name : springframework Product : Fedora 22 Version : 3.2.15 Release : 1.fc22 URL : https://spring.io/projects/spring-framework/ Summary : Spring Java Application Framework Description : Spring is a layered Java/J2EE application framework, based on code published in Expert One-on-One J2EE Design and Development by Rod Johnson (Wrox, 2002). -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-5211. Update to 3.2.15.RELEASE -------------------------------------------------------------------------------- References: [ 1 ] Bug #1272946 - CVE-2015-5211 Spring Framework: Reflected File Download (RFD) vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1272946 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update springframework' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Nov 01, 2015
Fedora
89
security advisoryfedoracriticalFedora 21 FEDORA-2015-11184 Critical: Springframework DoS Fix
Security fix for CVE-2015-3192. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-11184 2015-07-04 17:45:37 -------------------------------------------------------------------------------- Name : springframework Product : Fedora 21 Version : 3.2.14 Release : 1.fc21 URL : https://spring.io/projects/spring-framework/ Summary : Spring Java Application Framework Description : Spring is a layered Java/J2EE application framework, based on code published in Expert One-on-One J2EE Design and Development by Rod Johnson (Wrox, 2002). -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-3192 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 3 2015 Michal Srb - 0:3.2.14-1 - Update to 3.2.14 - Resolves: CVE-2015-3192 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1239002 - CVE-2015-3192 Spring Framework: denial-of-service attack with XML input https://bugzilla.redhat.com/show_bug.cgi?id=1239002 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update springframework' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Jul 16, 2015
•Critical
Fedora
89
security advisoryFedorainformation disclosureFedora 20: FEDORA-2015-6862 Urgent Springframework Security Alert
Security fix for CVE-2014-0225. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6862 2015-04-26 07:27:39 -------------------------------------------------------------------------------- Name : springframework Product : Fedora 20 Version : 3.1.4 Release : 3.fc20 URL : https://spring.io Summary : Spring Java Application Framework Description : Spring is a layered Java/J2EE application framework, based on code published in Expert One-on-One J2EE Design and Development by Rod Johnson (Wrox, 2002). -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-0225 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 24 2015 Michal Srb - 0:3.1.4-3 - Resolves: CVE-2014-0225 * Fri Dec 6 2013 gil cattaneo 0:3.1.4-2 - fix for rhbz: 993376, 953977 - switch to XMvn - disable derby (partial), and jopt-simple support - enable castor and jruby support * Thu Dec 5 2013 Orion Poplawski - 0:3.1.4-1 - Update to 3.1.4 - Add BR xmlunit - Change wstx-asl to woodstox-core-asl * Sun Aug 4 2013 Fedora Release Engineering - 0:3.1.1-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1110110 - CVE-2014-0225 Spring Framework: Information disclosure via SSRF https://bugzilla.redhat.com/show_bug.cgi?id=1110110 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update springframework' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
May 08, 2015
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!