Information on source package shiro

Available versions

ReleaseVersion
stretch1.3.2-1
stretch (security)1.3.2-1+deb9u1
buster1.3.2-4
bullseye1.3.2-4
sid1.3.2-4

Open issues

BugstretchbusterbullseyesidDescription
CVE-2020-1957fixedvulnerablevulnerablevulnerableApache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic ...
CVE-2020-17510vulnerablevulnerablevulnerablevulnerableApache Shiro before 1.7.0, when using Apache Shiro with Spring, a spec ...
CVE-2020-13933vulnerablevulnerablevulnerablevulnerableApache Shiro before 1.6.0, when using Apache Shiro, a specially crafte ...
CVE-2020-11989fixedvulnerablevulnerablevulnerableApache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic ...
CVE-2019-12422vulnerable (no DSA)vulnerable (no DSA)vulnerablevulnerableApache Shiro before 1.4.2, when using the default "remember me" config ...

Resolved issues

BugDescription
CVE-2016-6802Apache Shiro before 1.3.2 allows attackers to bypass intended servlet ...
CVE-2016-4437Apache Shiro before 1.2.5, when a cipher key has not been configured f ...
CVE-2014-0074Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthen ...
CVE-2010-3863Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize ...

Security announcements

DSA / DLADescription
DLA-2273-1shiro - security update
DLA-2181-1shiro - security update
Search for package or bug name: Reporting problems