Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
98
security advisorysecurity updateRed Hat Enterprise LinuxRed Hat Enterprise Linux 9 RHSA-2023-0005-01 Crucial: BCEL Security Patch
An update for bcel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: bcel security update Advisory ID: RHSA-2023:0005-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:0005 Issue date: 2023-01-02 CVE Names: CVE-2022-42920 ==================================================================== 1. Summary: An update for bcel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - noarch 3. Description: The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class). Security Fix(es): * Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2142707 - CVE-2022-42920 Apache-Commons-BCEL: arbitrary bytecode produced via out-of-boundswriting 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): Source: bcel-6.4.1-9.el9_1.src.rpm noarch: bcel-6.4.1-9.el9_1.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-42920 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY7KzLtzjgjWX9erEAQi1RxAAjOBWF4SlAzB+rMSa0jprRya01ZR1l47y 717QoQX9htFZAt/rT0+ra8x612EJFAczDbducY5QykcjMdsq2b7N2hKscevc6xYr IsXJGTzNwfMAGMs6R1WSiGhAQA9Fop6s/+A9noGR67IWCmp3ugEs/YyZEPxb6cZr oxGgp2ClWpuUoZ0MUyhoW8gJx01DZi8jgcUzE8+mfGEFSBIsjIvJ6jQpFTmSAAwe iz6kN24ANeO9FLtGtEZmVdhwwaowIONU4TvVQ0V68Abeipxqou9GhoCFDLfI4gRa JhgfpYrRPTQckfTZGemN+1P6L3FgMZztIzoa8V3zEwhw8UG4Ofslm/aMPV8KZukq XDrRNQgP9BXFr0ccJpF1v62q3hgQmX4oZBkpjujfeZD1KGYl5IVmOJH3Ry/FJUui f9WXKJlW7Jw1L9bO6S8vIvPtkbgwAZIjuFhm96uSqhCu7Qlr82t2hNRCH6d5X0EW 2pwJmhn0o+7I3DUgogmWbRh/qEBIByZWtZP3PTU9Fh3f8Bf+6lnLwwgEzB2sbNDO RaybVJmHp1O5XpfCGNV7H/dGh7sAN/nzyEjzF1oB/QA1dbDkiudQCczx4wvtxpFu KpyF8N+R8Xn1VASx+X7LEbfaQAnVATutFUnYp39gT7PgEBDTt3pPH9l2l/wNhSJM tE7d9mkqkrs=gsMH -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 02, 2023
•Important
Red Hat
200
security advisoryimportantout-of-boundsScientific Linux SL7 SLSA-2022-8958-1 Important BCEL Security Fix
Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 noarch bcel-5.2-19.el7_9.noarch.rpm bcel-javadoc-5.2-19.el7_9.noarch.rpm - Scientific Linux Development Team. Synopsis: Important: bcel security update Advisory ID: SLSA-2022:8958-1 Issue Date: 2022-12-13 CVE Numbers: CVE-2022-42920 -- Security Fix(es): * Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE -- SL7 noarch bcel-5.2-19.el7_9.noarch.rpm bcel-javadoc-5.2-19.el7_9.noarch.rpm - Scientific Linux Development Team . Crucial security update alert for Apache Commons addressing potential vulnerabilities due to excessive buffer writings in recent package iterations.. bcel Security Update, Scientific Linux Advisory, Apache Commons BCEL, Out-of-Bounds Writing, SL7 Updates. . Severity: Important. LinuxSecurity.com Team
Dec 13, 2022
•Important
Scientific Linux
89
security advisorymoderateFedoraFedora 36: FEDORA-2023-a71e63e213 High: XYZ Buffer Overflow Vulnerability
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-f60a52e054 2022-12-11 01:46:58.698227 --------------------------------------------------------------------------------Name : bcel Product : Fedora 35 Version : 6.4.1 Release : 10.fc35 URL : https://commons.apache.org/proper/commons-bcel/ Summary : Byte Code Engineering Library Description : The Byte Code Engineering Library (formerly known as JavaClass) is intended to give users a convenient possibility to analyze, create, and manipulate (binary) Java class files (those ending with .class). Classes are represented by objects which contain all the symbolic information of the given class: methods, fields and byte code instructions, in particular. Such objects can be read from an existing file, be transformed by a program (e.g. a class loader at run-time) and dumped to a file again. An even more interesting application is the creation of classes from scratch at run-time. The Byte Code Engineering Library (BCEL) may be also useful if you want to learn about the Java Virtual Machine (JVM) and the format of Java .class files. BCEL is already being used successfully in several projects such as compilers, optimizers, obsfuscators and analysis tools, the most popular probably being the Xalan XSLT processor at Apache. --------------------------------------------------------------------------------Update Information: Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing --------------------------------------------------------------------------------ChangeLog: * Thu Dec 1 2022 Mikolaj Izdebski - 6.4.1-10 - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920 * Sat Feb 5 2022 Jiri Vanek - 6.4.1-9 - Rebuilt for java-17-openjdk as systemjdk * Wed Jan 19 2022 Fedora Release Engineering - 6.4.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #2142727 - CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2142727 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-f60a52e054' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 11, 2022
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!