Your submission was sent successfully! Close

USN-4740-1: Apache Shiro vulnerabilities

18 February 2021

Apache Shiro could be made to crash if it received specially crafted input.



  • shiro - Powerful and easy-to-use Java security framework


It was discovered that Apache Shiro mishandled specially crafted requests. An
attacker could use this vulnerability to bypass authentication mechanisms.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04
Ubuntu 18.04

In general, a standard system update will make all the necessary changes.