ELSA-2015-2521

Опубликовано: 30 нояб. 2015

Источник: oracle-oval

Платформа: Oracle Linux 6

Описание

ELSA-2015-2521: jakarta-commons-collections security update (IMPORTANT)

[0:3.2.1-3.5]

Fix Java object de-serialization vulnerability
Resolves: CVE-2015-7501

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

jakarta-commons-collections

3.2.1-3.5.el6_7

jakarta-commons-collections-javadoc

3.2.1-3.5.el6_7

jakarta-commons-collections-testframework

3.2.1-3.5.el6_7

jakarta-commons-collections-testframework-javadoc

3.2.1-3.5.el6_7

jakarta-commons-collections-tomcat5

3.2.1-3.5.el6_7

Oracle Linux i686

jakarta-commons-collections

3.2.1-3.5.el6_7

jakarta-commons-collections-javadoc

3.2.1-3.5.el6_7

jakarta-commons-collections-testframework

3.2.1-3.5.el6_7

jakarta-commons-collections-testframework-javadoc

3.2.1-3.5.el6_7

jakarta-commons-collections-tomcat5

3.2.1-3.5.el6_7

Oracle Linux sparc64

jakarta-commons-collections

3.2.1-3.5.el6_7

jakarta-commons-collections-javadoc

3.2.1-3.5.el6_7

jakarta-commons-collections-testframework

3.2.1-3.5.el6_7

jakarta-commons-collections-testframework-javadoc

3.2.1-3.5.el6_7

jakarta-commons-collections-tomcat5

3.2.1-3.5.el6_7

Связанные CVE

CVE-2015-7501

Ссылки на источники

Связанные уязвимости

CVE-2015-7501

CVSS3: 9.8

ubuntu

почти 8 лет назад

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.