Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: 2025:02056-1 important: apache-commons-beanutils vulnerability fix

suse
Calendar Grey June 20, 2025
Dist Suse Esm H88
Critical security patch released for apache-commons-beanutils, tackling multiple vulnerabilities highlighted in the SUSE advisory report.
* bsc#1243793 Cross-References: * CVE-2014-0114 * CVE-2015-4852

Summary

## This update for apache-commons-beanutils fixes the following issues: Update to 1.11.0: * Fixed Bugs: * BeanComparator.compare(T, T) now throws IllegalArgumentException instead of RuntimeException to wrap all cases of ReflectiveOperationException. * MappedMethodReference.get() now throws IllegalStateException instead of RuntimeException to wrap cases of NoSuchMethodException. * ResultSetIterator.get(String) now throws IllegalArgumentException instead of RuntimeException to wrap cases of SQLException. * ResultSetIterator.hasNext() now throws IllegalStateException instead of RuntimeException to wrap cases of SQLException. * ResultSetIterator.next() now throws IllegalStateException instead of RuntimeException to wrap cases of SQLException.

Topics%20covered

Topics Covered

security advisory vulnerability important threat mitigation SUSE apache-commons-beanutils

References

* bsc#1243793

Cross-

* CVE-2014-0114

* CVE-2015-4852

* CVE-2025-48734

CVSS scores:

* CVE-2015-4852 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2015-4852 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-48734 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-48734 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that solves three vulnerabilities can now be installed.

##

* https://www.suse.com/security/cve/CVE-2014-0114.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:02056-1
Release Date: 2025-06-20T16:17:25Z
Rating: important

Topics%20covered

Topics Covered

security advisory vulnerability important threat mitigation SUSE apache-commons-beanutils

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here