...@cloudstack.apache.org
Subject: [SHARE] CloudStack and Spring4Shell
All,
A new spring-framework RCE [1] and CVEs [2][3] have been announced, aka,
Spring4Shell. The origin appears to be tracked to VMware products [2][3] and
spring-framework has published new releases v5.3.18 and v5.2.20 [1] as
mitigation
All,
A new spring-framework RCE [1] and CVEs [2][3] have been announced, aka,
Spring4Shell. The origin appears to be tracked to VMware products [2][3] and
spring-framework has published new releases v5.3.18 and v5.2.20 [1] as
mitigation.
CloudStack isn't deployed as a war and doesn't use Tomca
