Date: Tue, 16 May 2017 16:59:51 +0100 From: Colm O hEigeartaigh <coheigea@...che.org> To: oss-security@...ts.openwall.com Subject: Two new security advisories for Apache CXF Fediz All, Two new security advisories are released that are fixed in the latest Apache CXF Fediz releases: a) CVE-2017-7661: The Apache CXF Fediz Jetty and Spring plugins are vulnerable to CSRF attacks. b) CVE-2017-7662: The Apache CXF Fediz OIDC Client Registration Service is vulnerable to CSRF attacks The security advisory texts are available at the following link - please read them carefully if you are an Apache CXF Fediz user: http://cxf.apache.org/security-advisories.html -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ