Your submission was sent successfully! Close

USN-4740-1: Apache Shiro vulnerabilities

18 February 2021

Apache Shiro could be made to crash if it received specially crafted input.

Releases

Packages

  • shiro - Powerful and easy-to-use Java security framework

Details

It was discovered that Apache Shiro mishandled specially crafted requests. An
attacker could use this vulnerability to bypass authentication mechanisms.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04
Ubuntu 18.04

In general, a standard system update will make all the necessary changes.