Bug 20112

Summary:	springframework-security new security issue CVE-2016-9879
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Nicolas Lécureuil <mageia>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	geiger.david68210
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://lwn.net/Vulnerabilities/711462/
Whiteboard:
Source RPM:	springframework-security-3.2.7-2.mga6.src.rpm	CVE:	CVE-2016-9879
Status comment:

Description David Walser 2017-01-13 12:29:56 CET

Fedora has issued an advisory on January 12:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LUQ2JZ2N3HMLWKPM6YN2MSQOMOGRNHIF/

The issue is fixed upstream in 3.2.10:
https://bugzilla.redhat.com/show_bug.cgi?id=1409838

I'm not sure why this package is in Cauldron, as we didn't have it in Mageia 5.

David Walser 2017-01-13 12:30:11 CET

CC: (none) => geiger.david68210

Comment 1 Nicolas Lécureuil 2017-04-28 14:03:15 CEST

Fixed in cauldron

Status: NEW => RESOLVED
Resolution: (none) => FIXED
CVE: (none) => CVE-2016-9879