Discover Government News

--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2022-f60a52e054
2022-12-11 01:46:58.698227
--------------------------------------------------------------------------------Name        : bcel
Product     : Fedora 35
Version     : 6.4.1
Release     : 10.fc35
URL         : https://commons.apache.org/proper/commons-bcel/
Summary     : Byte Code Engineering Library
Description :
The Byte Code Engineering Library (formerly known as JavaClass) is
intended to give users a convenient possibility to analyze, create, and
manipulate (binary) Java class files (those ending with .class). Classes
are represented by objects which contain all the symbolic information of
the given class: methods, fields and byte code instructions, in
particular.  Such objects can be read from an existing file, be
transformed by a program (e.g. a class loader at run-time) and dumped to
a file again. An even more interesting application is the creation of
classes from scratch at run-time. The Byte Code Engineering Library
(BCEL) may be also useful if you want to learn about the Java Virtual
Machine (JVM) and the format of Java .class files.  BCEL is already
being used successfully in several projects such as compilers,
optimizers, obsfuscators and analysis tools, the most popular probably
being the Xalan XSLT processor at Apache.

--------------------------------------------------------------------------------Update Information:

Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode
produced via out-of-bounds writing
--------------------------------------------------------------------------------ChangeLog:

* Thu Dec  1 2022 Mikolaj Izdebski  - 6.4.1-10
- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920
* Sat Feb  5 2022 Jiri Vanek  - 6.4.1-9
- Rebuilt for java-17-openjdk as system jdk
* Wed Jan 19 2022 Fedora Release Engineering  - 6.4.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #2142727 - CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing [fedora-35]
        https://bugzilla.redhat.com/show_bug.cgi?id=2142727
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-f60a52e054' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Do not reply to spam, report it: https://pagure.io/login/

Fedora 35: bcel 2022-f60a52e054

December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing

Summary

The Byte Code Engineering Library (formerly known as JavaClass) is

intended to give users a convenient possibility to analyze, create, and

manipulate (binary) Java class files (those ending with .class). Classes

are represented by objects which contain all the symbolic information of

the given class: methods, fields and byte code instructions, in

particular. Such objects can be read from an existing file, be

transformed by a program (e.g. a class loader at run-time) and dumped to

a file again. An even more interesting application is the creation of

classes from scratch at run-time. The Byte Code Engineering Library

(BCEL) may be also useful if you want to learn about the Java Virtual

Machine (JVM) and the format of Java .class files. BCEL is already

being used successfully in several projects such as compilers,

optimizers, obsfuscators and analysis tools, the most popular probably

being the Xalan XSLT processor at Apache.

Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode

produced via out-of-bounds writing

* Thu Dec 1 2022 Mikolaj Izdebski - 6.4.1-10

- Fix arbitrary bytecode produced via out-of-bounds writing

- Resolves: CVE-2022-42920

* Sat Feb 5 2022 Jiri Vanek - 6.4.1-9

- Rebuilt for java-17-openjdk as system jdk

* Wed Jan 19 2022 Fedora Release Engineering - 6.4.1-8

- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[ 1 ] Bug #2142727 - CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing [fedora-35]

https://bugzilla.redhat.com/show_bug.cgi?id=2142727

su -c 'dnf upgrade --advisory FEDORA-2022-f60a52e054' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it: https://pagure.io/login/

FEDORA-2022-f60a52e054 2022-12-11 01:46:58.698227 Product : Fedora 35 Version : 6.4.1 Release : 10.fc35 URL : https://commons.apache.org/proper/commons-bcel/ Summary : Byte Code Engineering Library Description : The Byte Code Engineering Library (formerly known as JavaClass) is intended to give users a convenient possibility to analyze, create, and manipulate (binary) Java class files (those ending with .class). Classes are represented by objects which contain all the symbolic information of the given class: methods, fields and byte code instructions, in particular. Such objects can be read from an existing file, be transformed by a program (e.g. a class loader at run-time) and dumped to a file again. An even more interesting application is the creation of classes from scratch at run-time. The Byte Code Engineering Library (BCEL) may be also useful if you want to learn about the Java Virtual Machine (JVM) and the format of Java .class files. BCEL is already being used successfully in several projects such as compilers, optimizers, obsfuscators and analysis tools, the most popular probably being the Xalan XSLT processor at Apache. Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing * Thu Dec 1 2022 Mikolaj Izdebski - 6.4.1-10 - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920 * Sat Feb 5 2022 Jiri Vanek - 6.4.1-9 - Rebuilt for java-17-openjdk as system jdk * Wed Jan 19 2022 Fedora Release Engineering - 6.4.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild [ 1 ] Bug #2142727 - CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2142727 su -c 'dnf upgrade --advisory FEDORA-2022-f60a52e054' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/ Do not reply to spam, report it: https://pagure.io/login/

Change Log

References

Update Instructions

Severity
Product : Fedora 35
Version : 6.4.1
Release : 10.fc35
URL : https://commons.apache.org/proper/commons-bcel/
Summary : Byte Code Engineering Library

Related News