-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Package : shiro Version : 1.2.3-1+deb8u1 CVE ID : CVE-2020-1957 Debian Bug : #955018
It was discovered that there was a path-traversal issue in Apache Shiro, a security framework for the Java programming language. A specially-crafted request could cause an authentication bypass. For Debian 8 "Jessie", this issue has been fixed in shiro version 1.2.3-1+deb8u1. We recommend that you upgrade your shiro packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS Regards, - -- ,''`. : :' : Chris Lamb `. `'` [email protected] / chris-lamb.co.uk `- -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl6cGnIACgkQHpU+J9Qx HlhZeBAAsML9mnKxDWCtER2aZJvU9bQkZ+m9AV/yDYfa2f6hWPffWXIVOaKarD8f SIpALxsWhzHMWYzQtfMWCJc47r/oItd+kWz2FkoI8ZcM0MM3IO2lNYbIT2xuk5uU vRP2Fzbe2WbRj0skaGMTMm50cNxYeI5/Vaool/r5FeckiSBcekGU7m8ZokEQrvlZ o3JTaB/ANJRexUPSOc0h4zdtRf2Ws1d0mcAs82mcfmH3f2i17SH+J65O2WfmOmRm nhgLFXOygpKQ6cgejYVizl8o0Mr4tC57jb6zUNUgSnvTQN5/JHAyuubMWstD1k+O Joc5rFrDSwVMGwslCeezRLrsE2uWbI6DdUG2eMSVU7S3mdf6vcIhpS2frOqDXvdh NO1+ctBeFebgMHtyk9nzCEX8F0ZbMhtDw0ieikawE3i9+Lpcdr0pTp+jh+Vx27QJ HRTRQccX4/J9CICL7fiLWwQp0q8laps5HVeQ7lyMEAb2srlyC6w7qsoKTFattkWA 9UzJQCa10IMM7wI+ac/IQq6I3ESxIP5k7AnQIW0oC2Ye9IxTe958w+6WzEt2VmlX A1rdSbHrKZu8ZDiEz99FligOO+mM1z2wBjUxRxnzUzvlYaJVu5ZLFZoifFA9tAk0 Bbbc2tBoa/MUr27BBYU+qEqrfszj3e3Ef9KTBbVdcfOoi1RWqCI= =TIcr -----END PGP SIGNATURE-----
