[ubuntu/oracular-updates] libspring-java 4.3.30-2ubuntu0.24.10.1 (Accepted)

[Ubuntu Archive Robot]

libspring-java (4.3.30-2ubuntu0.24.10.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Remote code execution through PropertyDescriptor.
    - debian/patches/CVE-2022-22965.patch: Don't allow binding non-class
      properties name variants in .../beans/CachedIntrospectionResults.java.
    - CVE-2022-22965

Date: 2024-12-16 15:01:24.144229+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libspring-java/4.3.30-2ubuntu0.24.10.1
-------------- next part --------------
Sorry, changesfile not available.