Ubuntu
libspring-ldap-java package

libspring-ldap-java 1.3.1.RELEASE-4+deb7u1build0.14.04.1 source package in Ubuntu

Changelog

libspring-ldap-java (1.3.1.RELEASE-4+deb7u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

libspring-ldap-java (1.3.1.RELEASE-4+deb7u1) wheezy-security; urgency=high

  * Non-maintainer upload by the LTS team.
  * Fix CVE-2017-8028:
    Tobias Schneider discovered that Spring-LDAP would allow authentication
    with an arbitrary password when the username is correct, no additional
    attributes are bound and when using LDAP BindAuthenticator with
    DefaultTlsDirContextAuthenticationStrategy as the authentication strategy
    and setting userSearch. This occurs because some LDAP vendors require an
    explicit operation for the LDAP bind to take effect.

 -- Steve Beattie <email address hidden>  Mon, 27 Nov 2017 11:58:43 -0800

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Trusty
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates universe java
Trusty security universe java

Builds

Trusty: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
libspring-ldap-java_1.3.1.RELEASE.orig.tar.gz 487.7 KiB 6ea8451b08bb2b7258de625ddad8444adadefe0b7dcab5eb6346e8fa089bfe16
libspring-ldap-java_1.3.1.RELEASE-4+deb7u1build0.14.04.1.debian.tar.gz 11.6 KiB c56311b7ba771bff3dd04a77baf02db0d725684a4e419dcee07755ed125b0595
libspring-ldap-java_1.3.1.RELEASE-4+deb7u1build0.14.04.1.dsc 2.5 KiB 34568777cad25cb0e2505bc4084705ea232dcdc839272284532bec73f56c10bc

View changes file

Binary packages built by this source

libspring-ldap-java: Java library for simpler LDAP programming

 Spring LDAP is built on the same principles as the JdbcTemplate in Spring
 JDBC. It completely eliminates the need to worry about creating and closing
 LdapContext and looping through NamingEnumeration. It also provides a
 more comprehensive unchecked Exception hierarchy, built on Spring's
 DataAccessException. As a bonus, it also contains classes for dynamically
 building LDAP filters and DNs (Distinguished Names), LDAP attribute
 management, and client-side LDAP transaction management.

libspring-ldap-java-doc: documentation for libspring-ldap-java

 Documentation for Spring LDAP, that is a Java library built on the same
 principles as the JdbcTemplate in Spring JDBC. It completely eliminates the
 need to worry about creating and closing LdapContext and looping through
 NamingEnumeration.