Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 467
Alerts This Week
Warning Icon 1 467

Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2

ubuntu
Calendar Grey July 23, 2026
Scroller Ubuntu
A regression in Apache Commons BeanUtils affecting Ubuntu 16.04 LTS, with critical fixes for CVE-2014-0114 and CVE-2019-10086.
A regression was introduced in Apache Commons BeanUtils affecting Ubuntu 16.04 LTS due to an incomplete fix for CVE-2014-0114 and CVE-2019-10086, which could allow arbitrary code e...

Summary

USN-8322-1 introduced a regression in Apache Commons BeanUtils

Software Description:

- commons-beanutils: Apache Commons BeanUtils - Utility for manipulating Java beans

Details:

USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was

discovered that for Ubuntu 18.04 LTS, during the update preparation

phase, a previous fix for CVE-2014-0114 and CVE-2019-10086 was

incorrectly dropped. This update reintroduces the fix for

CVE-2014-0114 and CVE-2019-10086.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Apache Commons BeanUtils incorrectly allowed

access to the declaredClass property of Java enum objects when handling

externally supplied property paths. An attacker could possibly use this

issue to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution Ubuntu regression apache-commons-beanutils

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  libcommons-beanutils-java       1.9.2-3ubuntu0.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8322-2

https://ubuntu.com/security/notices/USN-8322-1

CVE-2014-0114, CVE-2019-10086, https://launchpad.net/bugs/2161582

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8322-2

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution Ubuntu regression apache-commons-beanutils

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.