You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa springframework

Sigurnosni nedostatak programskog paketa springframework

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-9295d75400
2015-11-01 18:13:40.461229
——————————————————————————–

Name : springframework
Product : Fedora 21
Version : 3.2.15
Release : 1.fc21
URL : http://projects.spring.io/spring-framework/
Summary : Spring Java Application Framework
Description :
Spring is a layered Java/J2EE application framework, based on code published in
Expert One-on-One J2EE Design and Development by Rod Johnson (Wrox, 2002).

——————————————————————————–
Update Information:

Security fix for CVE-2015-5211. Update to 3.2.15.RELEASE
——————————————————————————–
References:

[ 1 ] Bug #1272946 – CVE-2015-5211 Spring Framework: Reflected File Download (RFD) vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1272946
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update springframework’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-693035254a
2015-11-01 18:14:58.630611
——————————————————————————–

Name : springframework
Product : Fedora 22
Version : 3.2.15
Release : 1.fc22
URL : http://projects.spring.io/spring-framework/
Summary : Spring Java Application Framework
Description :
Spring is a layered Java/J2EE application framework, based on code published in
Expert One-on-One J2EE Design and Development by Rod Johnson (Wrox, 2002).

——————————————————————————–
Update Information:

Security fix for CVE-2015-5211. Update to 3.2.15.RELEASE
——————————————————————————–
References:

[ 1 ] Bug #1272946 – CVE-2015-5211 Spring Framework: Reflected File Download (RFD) vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1272946
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update springframework’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2015-11-0013-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa pacemaker

Otkriven je sigurnosni nedostatak u programskom paketu pacemaker za Fedoru 21. Otkriveni nedostatak potencijalnim napadačima omogućuje stjecanje uvećanih ovlasti. Svim...

Close