Adobe just released this bulletin:
Today a Security Bulletin has been posted in regards to the January 12, 2010 quarterly security update for Adobe Reader and Acrobat. The update addresses critical security issues in the products, including a patch to resolve CVE-2009-4324 previously discussed in the Adobe PSIRT blog on December 15, 2009 (”Security Advisory APSA09-07 [...]
We're pleased to an announce the release of Spring Security 3.0.0.
Thanks to everyone in the community who has helped out by testing the milestone and release candidate versions and providing feedback.
Check out the project website for a list of supported features, and also the release announcement in the community forum
for information on changes which may [...]
When it comes to security we always thing about EJB and other Java security related APIs. But web.xml itself provides you BASIC security control over you web application. If your application is not using any EJB and you need a security control, then web.xml is there to help you .
Read the entire article at: http://passion4java.blogspot.com/2009/12/securing-your-application-using-webxml.html