Apache has acknowledged some vulnerabilities in Apache Geronimo, which can be exploited by malicious people to disclose system information or potentially sensitive information, cause a DoS (Denial of Service), and compromise a vulnerable system.

For more information:
SA39574
SA40252
SA40260
SA40969

The vulnerabilities are reported in version 2.2.

Solution
Update to version 2.2.1.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://svn.apache.org/repos/asf/geronimo/server/tags/geronimo-2.2.1/RELEASE_NOTES-2.2.1.txt
http://geronimo.apache.org/22x-security-report.html
http://geronimo.apache.org/geronimo-22x-cve-2010-1632-patch-instructions.html
http://geronimo.apache.org/geronimo-21x-and-22x-spring-framework-sec02-patch-instructions.html
http://geronimo.apache.org/geronimo-21x-and-22x-cve-2010-2227-apache-tomcat-remote-denial-of-service-patch-instructions.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers