Debian: Security Advisory (DLA-1853-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1853-1] libspring-java security update

Package : libspring-java Version : 3.0.6.RELEASE-17+deb8u1 CVE ID : CVE-2014-3578 CVE-2014-3625 CVE-2015-3192 CVE-2015-5211 CVE-2016-9878 Debian Bug : 760733 769698 796137 849167 Vulnerabilities have been identified in libspring-java, a modular Java/J2EE application framework. CVE-2014-3578 A...

com.exadel.flamingo.maven.plugin:flamingoapp (>=1.0.0, <=1.5.0), org.acegisecurity:acegi-security (>=1.0.1, <=1.0.2) +19 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.7)

org.springframework:spring-webmvc MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.exadel.flamingo.maven.plugin:flamingoapp =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1,...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +1296 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=3.0.0.release, <=3.2.17.release)

org.springframework:spring-webmvc MAVEN version =3.0.0.release, =0.0.20, =0.3.3, =0.1.0, =1.0.0, =0.2, =3.0.1, =1.0.0-release, =3.0.10, =3.0.10, =4.2.1, =4.2.1, =4.2.1, =4.2.15 and more Source cves: CVE-2016-9878 Source advisory: GHSA-2M8H-FGR8-2Q9W...

org.springmodules:spring-modules-jakarta-commons (>=0.8, <=0.8a), org.springmodules:spring-modules-osworkflow (>=0.8, <=0.8a) potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0.3)

org.springframework:spring-webmvc MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons =0.8, =0.8, =0.8a Source cves: CVE-2016-9878...

org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0.5)

org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...

com.mysema.web:webmin (0.2.3), org.parancoe:parancoe (0.3.3) +11 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0.7)

org.springframework:spring-webmvc MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.mysema.web:webmin 0.2.3 - org.parancoe:parancoe 0.3.3 - org.parancoe:parancoe-core 0.3.3 ...

net.jawr.extensions:jawr-spring-extension (3.6), net.jawr.tools:jawr-ant (1.6) +11 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0.8)

org.springframework:spring-webmvc MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.jawr.extensions:jawr-spring-extension 3.6 - net.jawr.tools:jawr-ant 1.6 -...

net.sf.json-lib:json-lib-ext-spring (1.0), org.apache.activemq:activemq-web (5.1.0) +9 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.5.1)

org.springframework:spring-webmvc MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sf.json-lib:json-lib-ext-spring 1.0 - org.apache.activemq:activemq-web 5.1.0 -...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-orm (1.2.3) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.3)

org.springframework:spring-webmvc MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-orm 1.2.3 -...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +11 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.8)

org.springframework:spring-webmvc MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =0.5, =0.8, =0.8a Source cves: CVE-2016-9878 Sour...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0-m1)

org.springframework:spring-webmvc MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 Sourc...

org.springmodules:spring-modules-jakarta-commons (0.7), org.springmodules:spring-modules-osworkflow (0.7) potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0.1)

org.springframework:spring-webmvc MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons 0.7 -...

org.apache.activemq:activemq-web (5.2.0), org.apache.activemq:activemq-web-console (5.2.0) +27 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.5.5)

org.springframework:spring-webmvc MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.activemq:activemq-web 5.2.0 - org.apache.activemq:activemq-web-console 5.2.0 -...

com.gwtincubator:gwt-incubator-security (1.0.1), com.redhat.rhevm.api:rhevm-api-mock-webapp (>=0.1-milestone, <=0.9-milestone8.2) +200 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.5.6)

org.springframework:spring-webmvc MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.gwtincubator:gwt-incubator-security 1.0.1 - com.redhat.rhevm.api:rhevm-api-mock-webapp...

com.54chen:paoding-rose (1.0), com.54chen:paoding-rose-portal (1.0) +14 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.5.6.sec02)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.54chen:paoding-rose 1.0 - com.54chen:paoding-rose-portal 1.0 -...

org.springframework:spring-hibernate (1.2.1), org.springframework:spring-orm (1.2.1) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.1)

org.springframework:spring-webmvc MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.1 - org.springframework:spring-orm 1.2.1 -...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-orm (1.2.2) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.2)

org.springframework:spring-webmvc MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-orm 1.2.2 -...

net.sourceforge.openutils:openutils-spring (0.2) potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0-m5)

org.springframework:spring-webmvc MAVEN version 2.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.openutils:openutils-spring 0.2 Source cves: CVE-2016-9878 Source advisory:...

com.github.seykron:htmlunit-runner-freemarker (1.0), org.springframework:spring-mock (2.0) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0)

org.springframework:spring-webmvc MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.seykron:htmlunit-runner-freemarker 1.0 - org.springframework:spring-mock 2.0 -...