Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Spring Boot packages could let attackers bypass security
published 3 months ago
Summary
Four Spring Boot components have been updated because they contained three security weaknesses that could let a malicious user execute unwanted actions or access data. The updates are included in version 2.7.16-tuxcare.1. Apply the new packages to the affected Spring Boot modules as soon as possible.
What to do
- Update springframework org.springframework.boot:org.springframework.boot.gradle.plugin to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-actuator to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-actuator-autoconfigure to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-antlib to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-autoconfigure to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-autoconfigure-processor to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-buildpack-platform to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-cli to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-configuration-metadata to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-configuration-processor to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-dependencies to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-devtools to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-gradle-plugin to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-jarmode-layertools to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-loader to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-loader-tools to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-maven-plugin to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-parent to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-properties-migrator to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-activemq to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-actuator to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-amqp to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-aop to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-artemis to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-batch to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-cache to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-cassandra to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-cassandra-reactive to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-couchbase to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-couchbase-reactive to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-elasticsearch to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-jdbc to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-jpa to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-ldap to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-mongodb to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-mongodb-reactive to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-neo4j to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-r2dbc to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-redis to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-redis-reactive to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-data-rest to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-freemarker to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-graphql to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-groovy-templates to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-hateoas to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-integration to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-jdbc to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-jersey to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-jetty to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-jooq to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-json to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-jta-atomikos to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-log4j2 to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-logging to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-mail to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-mustache to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-oauth2-client to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-oauth2-resource-server to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-parent to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-quartz to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-reactor-netty to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-rsocket to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-security to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-test to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-thymeleaf to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-tomcat to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-undertow to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-validation to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-web to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-web-services to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-webflux to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-starter-websocket to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-test to version 2.7.16-tuxcare.1.
- Update springframework org.springframework.boot:spring-boot-test-autoconfigure to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-actuator to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-actuator-autoconfigure to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-autoconfigure to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-devtools to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-properties-migrator to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-activemq to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-actuator to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-amqp to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-aop to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-artemis to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-batch to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-cache to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-cassandra to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-cassandra-reactive to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-couchbase to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-couchbase-reactive to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-elasticsearch to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-jdbc to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-jpa to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-ldap to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-mongodb to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-mongodb-reactive to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-neo4j to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-r2dbc to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-redis to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-redis-reactive to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-data-rest to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-freemarker to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-graphql to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-groovy-templates to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-hateoas to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-integration to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-jdbc to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-jersey to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-jooq to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-json to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-jta-atomikos to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-mail to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-mustache to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-oauth2-client to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-oauth2-resource-server to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-quartz to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-rsocket to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-security to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-test to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-thymeleaf to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-validation to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-web to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-web-services to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-webflux to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-starter-websocket to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-test to version 2.7.16-tuxcare.1.
- Update org.springframework.boot:spring-boot-test-autoconfigure to version 2.7.16-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | springframework | org.springframework.boot:org.springframework.boot.gradle.plugin |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-actuator |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-actuator-autoconfigure |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-antlib |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-autoconfigure |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-autoconfigure-processor |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-buildpack-platform |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-cli |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-configuration-metadata |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-configuration-processor |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-dependencies |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-devtools |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-gradle-plugin |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-jarmode-layertools |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-loader |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-loader-tools |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-maven-plugin |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-parent |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-properties-migrator |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-activemq |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-actuator |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-amqp |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-aop |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-artemis |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-batch |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-cache |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-cassandra |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-cassandra-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-couchbase |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-couchbase-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-elasticsearch |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-jdbc |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-jpa |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-ldap |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-mongodb |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-mongodb-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-neo4j |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-r2dbc |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-redis |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-redis-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-data-rest |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-freemarker |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-graphql |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-groovy-templates |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-hateoas |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-integration |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-jdbc |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-jersey |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
Showing 50 of 131. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-jetty |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-jooq |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-json |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-jta-atomikos |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-log4j2 |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-logging |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-mail |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-mustache |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-oauth2-client |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-oauth2-resource-server |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-parent |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-quartz |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-reactor-netty |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-rsocket |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-security |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-test |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-thymeleaf |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-tomcat |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-undertow |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-validation |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-web |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-web-services |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-webflux |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-starter-websocket |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-test |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.boot:spring-boot-test-autoconfigure |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-actuator |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-actuator-autoconfigure |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-autoconfigure |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-devtools |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-properties-migrator |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-activemq |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-actuator |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-amqp |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-aop |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-artemis |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-batch |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-cache |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-cassandra |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-cassandra-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-couchbase |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-couchbase-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-elasticsearch |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-jdbc |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-jpa |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-ldap |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-mongodb |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-mongodb-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-neo4j |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-r2dbc |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-redis |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-redis-reactive |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-data-rest |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-freemarker |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-graphql |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-groovy-templates |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-hateoas |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-integration |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-jdbc |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-jersey |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-jooq |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-json |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-jta-atomikos |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-mail |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-mustache |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-oauth2-client |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-oauth2-resource-server |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-quartz |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-rsocket |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-security |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-test |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-thymeleaf |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-validation |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-web |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-web-services |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-webflux |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-starter-websocket |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-test |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.boot:spring-boot-test-autoconfigure |
>= 2.7.16, < 2.7.16-tuxcare.1 Fix: upgrade to 2.7.16-tuxcare.1
|
Original advisory text
TuxCare security update for org.springframework.boot (3 CVEs)
TuxCare rebuilt 4 org.springframework.boot packages to address 3 CVEs. Fixed in 2.7.16-tuxcare.1.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2026-1778805965 · OSV
Track software like this
Free during beta