Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0700-1

Опубликовано: 09 мар. 2016
Источник: suse-cvrf

Описание

Security update for bsh2

This update for bsh2 fixes the following issues:

  • CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStream to deserialize data from an untrusted source.

Please see https://github.com/beanshell/beanshell/releases/tag/2.0b6 for more information.

Список пакетов

SUSE Linux Enterprise Software Development Kit 12
bsh2-2.0.0.b5-3.2
bsh2-classgen-2.0.0.b5-3.2
bsh2-javadoc-2.0.0.b5-3.2
SUSE Linux Enterprise Software Development Kit 12 SP1
bsh2-2.0.0.b5-3.2
bsh2-classgen-2.0.0.b5-3.2
bsh2-javadoc-2.0.0.b5-3.2

Ссылки

Описание

BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP1:bsh2-2.0.0.b5-3.2
SUSE Linux Enterprise Software Development Kit 12 SP1:bsh2-classgen-2.0.0.b5-3.2
SUSE Linux Enterprise Software Development Kit 12 SP1:bsh2-javadoc-2.0.0.b5-3.2
SUSE Linux Enterprise Software Development Kit 12:bsh2-2.0.0.b5-3.2
Ссылки