libspring-security-2.0-java vulnerabilities (Debian)

2 vulnerabilities.

• libspring-security-2.0-java Debian PlaintextPasswordEncoder authenticates encoded passwords that are null CVE-2019-11272 Fix available 7.3 HighJune 26, 2019
• libspring-security-2.0-java Debian Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security CVE-2019-3795 Fix available 3.8 LowApril 9, 2019