This Week in Spring - December 5th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! today, Spring Cloud, based on Spring Boot 3.2, goes GA! Don't miss this! I love this blog by Spring Framework legend Sébastien Deleuze on CDS with Spring Framework 6.1 I really enjoyed this discussion with Spring Security...

A Bootiful Podcast: Azul Deputy CTO Simon Ritter

Hi, Spring fans! In this week's installment I talk to Azul Deputy CTO Simon Ritter @speakjava, recorded live at Devoxx Belgium 2023!...

Azul Zulu Java Multiple Vulnerabilities (2023-10-17)

The version of Azul Zulu installed on the remote host is prior to 6 6.59.0.14 / 7 7.65.0.14 / 8 8.73.0.12 / 11 11.67.16 / 17 17.45.16 / 21 21.30.16. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-10-17 advisory. - Vulnerability in the Oracle Java SE, Oracle Graal...

CVE-2023-0925

Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry listening on TCP port 2099 by default and two RMI interfaces listening on a single, dynamically assigned TCP high port. Port 2099 serves as a Java Remote Method Invocation RMI...

CVE-2023-0925

Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry listening on TCP port 2099 by default and two RMI interfaces listening on a single, dynamically assigned TCP high port. Port 2099 serves as a Java Remote Method Invocation RMI...

CVE-2023-0925 Software AG webMethods OneData Deserialization Vulnerability

Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry listening on TCP port 2099 by default and two RMI interfaces listening on a single, dynamically assigned TCP high port. Port 2099 serves as a Java Remote Method Invocation RMI...

CVE-2023-0925

Summary (CVE-2023-0925): Software AG webMethods OneData 10.11 is exposed with an embedded Azul Zulu Java 11.0.15 that runs a Java RMI registry on port 2099 and two RMI interfaces on a high, dynamically assigned port. An unauthenticated attacker with network access to these ports can instruct the ...

Azul Zulu Java Multiple Vulnerabilities (Jan 2022 Java update) CVE-2022-21248 CVE-2022-21277 CVE-2022-21366 CVE-2022-21282 CVE-2022-21296 CVE-2022-21283 CVE-2022-21291 CVE-2022-21305 CVE-2022-21293 CVE-2022-21294 CVE-2022-21340 CVE-2022-21299 CVE-2022-21341 CVE-2022-21349 CVE-2022-21360 CVE-2022-21365

The version of Azul Zulu installed on the remote host is prior to 6 6.45 / 7 7.51.0.12 / 8 8.59.0.12 / 11 11.53.14 / 13 13.45.12 / 15 15.37.14 / 17 17.32.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-01-18 advisory. - Vulnerability in the Oracle Java SE,...

Azul Zulu Java Multiple Vulnerabilities (CVE-2022-21618 CVE-2022-21619 CVE-2022-21624 CVE-2022-21626 CVE-2022-21628 CVE-2022-39399)

The version of Azul Zulu installed on the remote host is prior to 6 6.51 / 7 7.57.0.14 / 8 8.65.0.14 / 11 11.59.16 / 13 13.51.14 / 15 15.43.14 / 17 17.37.14 / 19 19.30.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-10-18 advisory. Vulnerability in the Oracle...

Azul Zulu Java Multiple Vulnerabilities (2023-07-18)

The version of Azul Zulu installed on the remote host is prior to 7 7.63.0.14 / 8 8.71.0.14 / 11 11.65.14 / 17 17.43.14 / 20 20.32.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-07-18 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise...

Azul Zulu Java Multiple Vulnerabilities (2023-04-18)

The version of Azul Zulu installed on the remote host is prior to 6 6.55.0.12 / 7 7.61.0.18 / 8 8.69.0.16 / 11 11.63.16 / 17 17.41.14 / 20 20.30.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-04-18 advisory. - Vulnerability in the Oracle Java SE, Oracle Graal...

Azul Zulu Java Multiple Vulnerabilities (2023-01-17)

The version of Azul Zulu installed on the remote host is prior to 6 6.53.0.12 / 7 7.59.0.18 / 8 8.67.0.22 / 11 11.61.18 / 13 13.53.18 / 15 15.45.18 / 17 17.39.20 / 19 19.32.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-01-17 advisory. - Vulnerability in the...

Azul Zulu Java Multiple Vulnerabilities (2022-10-18)

The version of Azul Zulu installed on the remote host is prior to 6 6.51 / 7 7.57.0.14 / 8 8.65.0.14 / 11 11.59.16 / 13 13.51.14 / 15 15.43.14 / 17 17.37.14 / 19 19.30.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-10-18 advisory. - Vulnerability in the Oracl...

Azul Zulu Java Multiple Vulnerabilities (2022-07-19)

The version of Azul Zulu installed on the remote host is prior to 6 6.49 / 7 7.55 / 8 8.63 / 11 11.57 / 13 13.49 / 15 15.41 / 17 17.35 / 18 18.32. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-07-19 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM...

A Bootiful Podcast: Simon Ritter, Java Champion and deputy CTO at Azul

Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Azul Deputy CTO and Javas own mad scientist and luminary Simon Ritter @speakjava...

Azul Zulu Java Multiple Vulnerabilities (2022-04-19)

The version of Azul Zulu installed on the remote host is prior to 6 6.47 / 7 7.53.0.16 / 8 8.61.0.18 / 11 11.55.18 / 13 13.47.16 / 15 15.39.16 / 17 17.33.16 / 18 18.30.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-04-19 advisory. - zlib before 1.2.12 allows...

Azul Zulu Java Multiple Vulnerabilities (2022-01-18)

The version of Azul Zulu installed on the remote host is prior to 6 6.45 / 7 7.51.0.12 / 8 8.59.0.12 / 11 11.53.14 / 13 13.45.12 / 15 15.37.14 / 17 17.32.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-01-18 advisory. - Vulnerability in the Oracle Java SE,...

Azul Zulu Java Multiple Vulnerabilities (2021-10-19)

The version of Azul Zulu installed on the remote host is prior to 6 6.43 / 7 7.49.0.14 / 8 8.57.0.14 / 11 11.51.16 / 13 13.43.12 / 15 15.35.12 / 17 17.30.16. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021-10-19 advisory. - There is a flaw in the xml entity encodi...

Azul Zulu Java Multiple Vulnerabilities (2021-07-20)

The version of Azul Zulu installed on the remote host is prior to 6 6.41.0.12 / 7 7.47.0.14 / 8 8.55.0.14 / 11 11.49.14 / 13 13.41.12 / 15 15.33.12 / 16 16.32.16. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021-07-20 advisory. - Vulnerability in the Java SE, Oracl...

Azul Zulu Java OpenJDK Vulnerability (2021-04-20)

The version of Azul Zulu installed on the remote host is prior to 6 = 6.39.0.14 SA / 7 = 7.45.0.12 SA or 7.46.0.11 CA / 8 = 8.53.0.12 SA or 8.54.0.21 CA / 11.0.0 = 11.47.18 SA or 11.48.21 CA / 13.0.0 = 13.39.14 SA or 13.40.15 CA / 15.0.0 = 15.31.14 SA or 15.32.15 CA / 16.0.0 = 16.30.20 SA or...