[SECURITY] Fedora 20 Update: springframework-security-3.1.7-1.fc20
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9648
2014-08-21 07:55:59
--------------------------------------------------------------------------------
Name : springframework-security
Product : Fedora 20
Version : 3.1.7
Release : 1.fc20
URL : http://static.springsource.org/spring-security/site/index.html
Summary : Modular Java/J2EE application security framework
Description :
Spring Security is a Java/Java EE framework that provides advanced
authentication, authorization and other comprehensive security features for
enterprise applications. In addition to having a comprehensive list of
security functionality, Spring Security is very configurable and employs the
Spring Framework for configuration, it allows for reuse and portability of
security components, and it can also be used with non-Spring applications.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2014-3527
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 19 2014 Michal Srb <msrb(a)redhat.com> - 3.1.7-1
- Update to upstream release 3.1.7
- Resolves: CVE-2014-3527
* Wed Mar 12 2014 Michal Srb <msrb(a)redhat.com> - 3.1.6-1
- Update to upstream release 3.1.6 (Fixes CVE-2014-0097)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1131359 - CVE-2014-3527 Spring Security CAS: Access control bypass via
untrusted infomation usage in proxy ticket authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1131359
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update springframework-security' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------