RHSA-2022:8959: Important: rh-maven36-bcel security update
The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).Security Fix(es): Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:8959?
The severity of RHSA-2022:8959 is classified as a significant concern due to the potential for arbitrary bytecode execution.
How do I fix RHSA-2022:8959?
To fix RHSA-2022:8959, upgrade the affected package to version 6.3.1-2.3.el7 or later.
What software does RHSA-2022:8959 affect?
RHSA-2022:8959 affects the Apache Commons BCEL library, specifically the rh-maven36-bcel and rh-maven36-bcel-javadoc packages.
What vulnerabilities does RHSA-2022:8959 address?
RHSA-2022:8959 addresses vulnerabilities related to out-of-bounds access that can result in arbitrary bytecode execution.
Is RHSA-2022:8959 critical for my systems?
Yes, if you are using affected versions of the software, it is critical to apply the patches to mitigate the risk of exploitation.