Debian: Security Advisory (DLA-1853-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1853-1] libspring-java security update

Package : libspring-java Version : 3.0.6.RELEASE-17+deb8u1 CVE ID : CVE-2014-3578 CVE-2014-3625 CVE-2015-3192 CVE-2015-5211 CVE-2016-9878 Debian Bug : 760733 769698 796137 849167 Vulnerabilities have been identified in libspring-java, a modular Java/J2EE application framework. CVE-2014-3578 A...

com.bekk.boss:maven-jetty-pluto-embedded (1.0.1), de.eonas.portal:opencmsportal (>=8.5.1.1, <=10.5.1.9) +32 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.2)

org.springframework:spring-web MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bekk.boss:maven-jetty-pluto-embedded 1.0.1 - de.eonas.portal:opencmsportal =8.5.1.1, =8.5.1.1,...

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +14 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.4)

org.springframework:spring-web MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

com.webtide.hightide:hightide-resources (6.1h.8), net.sourceforge.openutils:openutils-spring (1.0.4) +63 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.6)

org.springframework:spring-web MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.webtide.hightide:hightide-resources 6.1h.8 - net.sourceforge.openutils:openutils-spring 1.0.4 -...

com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +5 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5.2)

org.springframework:spring-web MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...

org.apache.struts:struts2-portlet (>=2.1.2, <=2.1.6), org.apache.struts:struts2-showcase (>=2.1.2, <=2.1.6) +18 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5.3)

org.springframework:spring-web MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.struts:struts2-portlet =2.1.2, =2.1.2, =2.1.2, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1,...

org.springframework:spring-hibernate (1.2.1), org.springframework:spring-mock (1.2.1) +3 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.1)

org.springframework:spring-web MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.1 - org.springframework:spring-mock 1.2.1 -...

org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +7 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.5)

org.springframework:spring-web MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) +1 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0-m1)

org.springframework:spring-web MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 -...

am.ik.springmvc:new-controller (>=0.1.0, <=0.2.0), am.ik.woothee:woothee-spring (1.0.0) +1729 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (>=4.0.0.release, <=4.1.6.release)

org.springframework:spring-web MAVEN version =4.0.0.release, =0.1.0, =1.0.0-alpha-3, =1.3.1-release, =0.0.6, =0.9.0-1, =1.0.0 and more Source cves: CVE-2015-3192 Source advisory: GHSA-6V7W-535J-RQ5M...

com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.9), edu.usc.ir:lucene-geo-gazetteer (0.2) +117 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5.5)

org.springframework:spring-web MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.custardsource.parfait:parfait-cxf =0.2.0, =1.0.15, =1.0.15, =1.0.15, =0.4.0, =1.4.0, =1.4.0,...

com.amashchenko.struts2.actionflow:struts2-actionflow-showcase (>=2.1.0, <=2.3.0), com.github.downgoon:jresty-rest (0.0.1) +802 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5.6)

org.springframework:spring-web MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.amashchenko.struts2.actionflow:struts2-actionflow-showcase =2.1.0, =1.0.1, =0.1.0, =0.1.4,...

com.54chen:paoding-rose (1.0), com.54chen:paoding-rose-portal (1.0) +24 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5.6.sec02)

org.springframework:spring-web MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.54chen:paoding-rose 1.0 - com.54chen:paoding-rose-portal 1.0 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0, <=2.8) +1391 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5.6.sec03)

org.springframework:spring-web MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0, =1.0, =0.0.1, =0.1.1,...

org.springframework:spring-portlet (2.0.3), org.springframework:spring-remoting (2.0.3) +4 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.3)

org.springframework:spring-web MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0.3 - org.springframework:spring-remoting 2.0.3 -...

org.apache.cocoon:cocoon-ajax-impl (1.0.0-m3), org.apache.cocoon:cocoon-apples-impl (1.0.0-rc1) +76 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.5)

org.springframework:spring-web MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.cocoon:cocoon-ajax-impl 1.0.0-m3 - org.apache.cocoon:cocoon-apples-impl 1.0.0-rc1 -...

com.mysema.web:webmin (0.2.3), org.jumpmind.symmetric:symmetric-ds (1.3.2) +17 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.7)

org.springframework:spring-web MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.mysema.web:webmin 0.2.3 - org.jumpmind.symmetric:symmetric-ds 1.3.2 - org.parancoe:parancoe 0.3...

com.github.ideahut:sbms-hessian (>=1.0.0, <=1.0.1), com.github.ideahut:sbms-httpinvoker (1.0.1) +76 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.8)

org.springframework:spring-web MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.ideahut:sbms-hessian =1.0.0, =1.0.1, =5.0.0, =1.0, =2.1.7, =2.1.7, =2.1.7, =2.1.10 and...

au.com.centrumsystems:build-pipeline-plugin (1.0), ch.ethz.origo:origo-issue-notifier (1.0) +1094 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5)

org.springframework:spring-web MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - au.com.centrumsystems:build-pipeline-plugin 1.0 - ch.ethz.origo:origo-issue-notifier 1.0 -...