dev  

Messages by Thread

• [ANNOUNCE] Apache Shiro 2.2.1 released Lenny Primak
• [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1453]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1454]' Apache Jenkins Server
  • [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1453]' Apache Jenkins Server
  • [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1453]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1454]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1454]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1455]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1455]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1456]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1456]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1456]' Apache Jenkins Server
• [update] Still working on 3.0.0 release lenny
• Committers: Please merge the outstanding PRs lenny
• [PR] build(deps): bump com.github.jnr:jnr-posix from 3.1.22 to 3.2.1 [shiro-site] via GitHub
• [PR] build(deps): bump org.apache:apache from 38 to 39 [shiro-site] via GitHub
• [RESULT][VOTE] Release Apache Shiro 3.0.0 lenny
• CVE-2026-56130: Apache Shiro: Remember-me cookie isn't checked for expiry on the server Lenny Primak
• CVE-2026-56091: Apache Shiro: Authentication bypass in Guice-Web integration Lenny Primak
• [PR] build(deps): bump org.javassist:javassist from 3.31.0-GA to 3.32.0-GA [shiro-site] via GitHub
  • Re: [PR] build(deps): bump org.javassist:javassist from 3.31.0-GA to 3.32.0-GA [shiro-site] via GitHub
• [VOTE] Release Apache Shiro 3.0.0 lenny
  • Re: [VOTE] Release Apache Shiro 3.0.0 lenny
  • Re: [VOTE] Release Apache Shiro 3.0.0 Francois Papon
  • Re: [VOTE] Release Apache Shiro 3.0.0 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Shiro 3.0.0 Benjamin Marwell
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1448]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1448]' Apache Jenkins Server
• [PR] build(deps): bump actions/checkout from 6 to 7 in the github-dependencies group [shiro-site] via GitHub
  • Re: [PR] build(deps): bump actions/checkout from 6 to 7 in the github-dependencies group [shiro-site] via GitHub
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1439]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1439]' Apache Jenkins Server
• CVE-2026-49268: Apache Shiro: LDAP DN Injection in DefaultLdapRealm Lenny Primak
• [PR] [release] Announce 2.2.1 [shiro-site] via GitHub
  • Re: [PR] [release] Announce 2.2.1 [shiro-site] via GitHub
• [RESULT][VOTE] Release Apache Shiro 2.2.1 Francois Papon
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1436]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1436]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1435]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1435]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1435]' Apache Jenkins Server
• 2.x maintenance branch created lenny
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1428]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1429]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1429]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1429]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1429]' Apache Jenkins Server
• [VOTE] Release Apache Shiro 2.2.1 Francois Papon
  • Re: [VOTE] Release Apache Shiro 2.2.1 lenny
  • Re: [VOTE] Release Apache Shiro 2.2.1 lenny
  • Re: [VOTE] Release Apache Shiro 2.2.1 Francois Papon
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [159]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [159]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1424]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1425]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1425]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1425]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1425]' Apache Jenkins Server
• [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1414]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1421]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1421]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1421]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1420]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1420]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1420]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1422]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1422]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1423]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1423]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1423]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1423]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1421]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1422]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1422]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1417]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1417]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1417]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1417]' Apache Jenkins Server
• [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1415]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1416]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1416]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1416]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1416]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1418]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1415]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1415]' Apache Jenkins Server
  • [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1415]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/3.x [3.x] [154]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [155]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [155]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [155]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1408]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1409]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1409]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1409]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1409]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/3.x [3.x] [151]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [152]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [152]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [152]' Apache Jenkins Server
• [I] Add EOL for version 2.x [shiro-site] via GitHub
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1407]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1407]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1407]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [150]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [150]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [150]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1406]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1406]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1406]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1406]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1403]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1403]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1403]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1405]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1405]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1405]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1404]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1404]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1404]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1402]' Apache Jenkins Server
• [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1401]' Apache Jenkins Server
  • [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1401]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1404]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1405]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1401]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1401]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1402]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1402]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1402]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1400]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1400]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1400]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1399]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1399]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1399]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1398]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1398]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1398]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1398]' Apache Jenkins Server
• 13 outstanding PRs lenny
• [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [147]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [148]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [148]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [148]' Apache Jenkins Server
  • [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [147]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1394]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1394]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1394]' Apache Jenkins Server
• [PR] [release] Announce 2.2.0 [shiro-site] via GitHub
  • Re: [PR] [release] Announce 2.2.0 [shiro-site] via GitHub
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/main [main] [1391]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1392]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1392]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1392]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1392]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1390]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1390]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1390]' Apache Jenkins Server
• CVE-2026-48589: Apache Shiro: Jakarta EE open redirect via untrusted Referer in post-login redirect flow Lenny Primak
• CVE-2026-44598: Apache Shiro Jakarta EE module: Open redirect and SSRF (requires valid credentials) Lenny Primak
• CVE-2026-43828: Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default Lenny Primak
• CVE-2026-43827: Apache Shiro: Session fixation: new session is not created after login by default Lenny Primak
• [PR] build(deps): bump asm.version from 9.10 to 9.10.1 [shiro-site] via GitHub
  • Re: [PR] build(deps): bump asm.version from 9.10 to 9.10.1 [shiro-site] via GitHub
• [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1384]' Apache Jenkins Server
  • [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1384]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1385]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1385]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1385]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1385]' Apache Jenkins Server
  • [BUILD-UNSTABLE]: Job 'Shiro/Shiro-all/main [main] [1384]' Apache Jenkins Server
• [RESULT][VOTE] Release Apache Shiro 2.2.0 Francois Papon
• [PR] [INFRA] Set up default rulesets for default and release branches [shiro-site] via GitHub
  • Re: [PR] [INFRA] Set up default rulesets for default and release branches [shiro-site] via GitHub
• [PR] build(deps): bump asm.version from 9.9.1 to 9.10 [shiro-site] via GitHub
  • Re: [PR] build(deps): bump asm.version from 9.9.1 to 9.10 [shiro-site] via GitHub
• [PR] security-model.adoc: draft additions for adversary model, known non-findings, triage dispositions [shiro-site] via GitHub
  • Re: [PR] security-model.adoc: draft additions for adversary model, known non-findings, triage dispositions [shiro-site] via GitHub
  • Re: [PR] security-model.adoc: draft additions for adversary model, known non-findings, triage dispositions [shiro-site] via GitHub
  • Re: [PR] security-model.adoc: draft additions for adversary model, known non-findings, triage dispositions [shiro-site] via GitHub
• [VOTE] Release Apache Shiro 2.2.0 Francois Papon
  • Re: [VOTE] Release Apache Shiro 2.2.0 lenny
  • Re: [VOTE] Release Apache Shiro 2.2.0 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Shiro 2.2.0 Benjamin Marwell
• [PR] build(deps): bump org.apache:apache from 37 to 38 [shiro-site] via GitHub
  • Re: [PR] build(deps): bump org.apache:apache from 37 to 38 [shiro-site] via GitHub
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [143]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [143]' Apache Jenkins Server
• [BUILD-FAILURE]: Job 'Shiro/Shiro-all/3.x [3.x] [138]' Apache Jenkins Server
  • [BUILD-FAILURE]: Job 'Shiro/Shiro-all/3.x [3.x] [139]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [140]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [140]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [140]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [139]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/3.x [3.x] [139]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1379]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1379]' Apache Jenkins Server
  • [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1379]' Apache Jenkins Server
• [BUILD-STABLE]: Job 'Shiro/Shiro-all/main [main] [1372]' Apache Jenkins Server

• Earlier messages