oss-sec mailing list archives

Re: SpringShell and recent OpenJDK updates


From: Alan Coopersmith <alan.coopersmith () oracle com>
Date: Wed, 30 Mar 2022 13:15:15 -0700

On 3/30/22 11:31, Jeffrey Walton wrote:
Hi Everyone,

I saw Ubuntu patched OpenJDK 11 recently. [1] Was that due to SpringShell? [2]

The Spring Framework is separate from OpenJDK.  (Perhaps you were thinking of
the Swing framework, which is part of OpenJDK?)

The latest I've seen on SpringShell suggests it was dropped without warning
as a zero-day: https://bugalert.org/content/notices/2022-03-30-spring.html

--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris


Current thread: