[ubuntu/oracular-updates] shiro 1.3.2-5ubuntu0.24.10.1 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Tue Dec 10 18:28:09 UTC 2024
shiro (1.3.2-5ubuntu0.24.10.1) oracular-security; urgency=medium
* SECURITY UPDATE: Path traversal through path rewriting and Open Redirect
with form authentication.
- debian/patches/CVE-2023-34478.patch: Check for path traversal values in
.../web/filter/InvalidRequestFilter.java.
- debian/patches/CVE-2023-467xx.patch: Extend path traversal checking
values in .../web/filter/InvalidRequestFilter.java.
- CVE-2023-34478
- CVE-2023-46749
- CVE-2023-46750
Date: 2024-12-09 18:58:11.946997+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/shiro/1.3.2-5ubuntu0.24.10.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the oracular-changes
mailing list