UbuntuUpdates.org

Package "shiro"

Name: shiro

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Apache Shiro - Java Security Framework
Latest version: 1.3.2-5ubuntu0.24.10.1
Release: oracular (24.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "shiro" in Oracular

Repository Area Version
base universe 1.3.2-5
updates universe 1.3.2-5ubuntu0.24.10.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.3.2-5ubuntu0.24.10.1 2024-12-10 20:06:54 UTC

  shiro (1.3.2-5ubuntu0.24.10.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Path traversal through path rewriting and Open Redirect
    with form authentication.
    - debian/patches/CVE-2023-34478.patch: Check for path traversal values in
      .../web/filter/InvalidRequestFilter.java.
    - debian/patches/CVE-2023-467xx.patch: Extend path traversal checking
      values in .../web/filter/InvalidRequestFilter.java.
    - CVE-2023-34478
    - CVE-2023-46749
    - CVE-2023-46750

 -- Hlib Korzhynskyy <email address hidden> Mon, 09 Dec 2024 14:36:39 -0330
CVE-2023-34478 Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used togeth
CVE-2023-46749 Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used togethe
CVE-2023-46750 URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Sh


About   -   Send Feedback to @ubuntu_updates