ELSA-2015-2522

Опубликовано: 30 нояб. 2015

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2015-2522: apache-commons-collections security update (IMPORTANT)

[3.2.1-22]

Fix Java object de-serialization vulnerability
Resolves: CVE-2015-7501

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

apache-commons-collections

3.2.1-22.el7_2

apache-commons-collections-javadoc

3.2.1-22.el7_2

apache-commons-collections-testframework

3.2.1-22.el7_2

apache-commons-collections-testframework-javadoc

3.2.1-22.el7_2

Oracle Linux x86_64

apache-commons-collections

3.2.1-22.el7_2

apache-commons-collections-javadoc

3.2.1-22.el7_2

apache-commons-collections-testframework

3.2.1-22.el7_2

apache-commons-collections-testframework-javadoc

3.2.1-22.el7_2

Связанные CVE

CVE-2015-7501

Ссылки на источники

Связанные уязвимости

CVE-2015-7501

CVSS3: 9.8

ubuntu

почти 8 лет назад

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.