Описание
ELSA-2015-1695: jakarta-taglibs-standard security update (IMPORTANT)
[0:1.1.1-11.7]
- Gracefully handle parsers without FSP support (e.g. Java 5 GCJ)
- Resolves: CVE-2015-0254
[0:1.1.1-11.6]
- Prevent XXE and RCE in JSTL XML tags
- Apply correction for previous CVE-2015-0254 patch (prevent XXE in <x:transform>)
- Resolves: CVE-2015-0254
[0:1.1.1-11.5]
- Prevent XXE and RCE in JSTL XML tags
- Resolves: CVE-2015-0254
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
jakarta-taglibs-standard
1.1.1-11.7.el6_7
jakarta-taglibs-standard-javadoc
1.1.1-11.7.el6_7
Oracle Linux i686
jakarta-taglibs-standard
1.1.1-11.7.el6_7
jakarta-taglibs-standard-javadoc
1.1.1-11.7.el6_7
Oracle Linux sparc64
jakarta-taglibs-standard
1.1.1-11.7.el6_7
jakarta-taglibs-standard-javadoc
1.1.1-11.7.el6_7
Oracle Linux 7
Oracle Linux aarch64
jakarta-taglibs-standard
1.1.2-14.el7_1
jakarta-taglibs-standard-javadoc
1.1.2-14.el7_1
Oracle Linux x86_64
jakarta-taglibs-standard
1.1.2-14.el7_1
jakarta-taglibs-standard-javadoc
1.1.2-14.el7_1
Связанные CVE
Связанные уязвимости
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
Apache Standard Taglibs before 1.2.3 allows remote attackers to execut ...
