UbuntuUpdates.org

Package "libshiro-java"

Name: libshiro-java

Description:

Apache Shiro - Java Security Framework
Latest version: 1.3.2-5ubuntu0.24.10.1
Release: oracular (24.10)
Level: updates
Repository: universe
Head package: shiro
Homepage: http://shiro.apache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libshiro-java"

All arch deb package
APT INSTALL

Other versions of "libshiro-java" in Oracular

Repository Area Version
base universe 1.3.2-5
security universe 1.3.2-5ubuntu0.24.10.1

Changelog

Version: 1.3.2-5ubuntu0.24.10.1 2024-12-10 21:07:08 UTC

  shiro (1.3.2-5ubuntu0.24.10.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Path traversal through path rewriting and Open Redirect
    with form authentication.
    - debian/patches/CVE-2023-34478.patch: Check for path traversal values in
      .../web/filter/InvalidRequestFilter.java.
    - debian/patches/CVE-2023-467xx.patch: Extend path traversal checking
      values in .../web/filter/InvalidRequestFilter.java.
    - CVE-2023-34478
    - CVE-2023-46749
    - CVE-2023-46750

 -- Hlib Korzhynskyy <email address hidden> Mon, 09 Dec 2024 14:36:39 -0330
CVE-2023-34478 Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used togeth
CVE-2023-46749 Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used togethe
CVE-2023-46750 URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Sh


About   -   Send Feedback to @ubuntu_updates