UnratedFix available
Apache Shiro 2.2.1
Apache Shiro 2.2.1 includes security improvements, fixes session fixation-related regressions, and deprecates RandomSessionIdGenerator due to insufficient entropy.
Announced Group revision 1
Original source ↗github-apache-shiro
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Apache Shiro 2.2.1 Bug fixes chore(jacoco): added exclusion for weld client proxy by @lprimak in #2769 Security Improvements [#2704] [#2710] Fixed Session fixation-related regressions by @lprimak in #2711 [#2758] Deprecate RandomSessionIdGenerator due to insufficient entropy by @lprimak in #2770
Apache Shiro
Apache Shiro 2.2.1
- Affected versions
- Not stated in this extraction
- Fixed versions
- 2.2.1
Apache Shiro 2.2.1
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #77427 · Revision 1
- Added to Heist Feed
- Publisher date