RHSA-2023:0004: Important: bcel security update
The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).Security Fix(es): Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0004?
The severity of RHSA-2023:0004 is classified as important.
How do I fix RHSA-2023:0004?
To fix RHSA-2023:0004, update the Apache Commons BCEL package to version 6.4.1-9.el9_0.
What is the vulnerability in RHSA-2023:0004?
RHSA-2023:0004 addresses a vulnerability that allows for arbitrary bytecode production via out-of-bounds access.
Which versions of the bcel package are affected by RHSA-2023:0004?
Versions of the bcel package prior to 6.4.1-9.el9_0 are affected by RHSA-2023:0004.
What is affected software for RHSA-2023:0004?
The affected software for RHSA-2023:0004 includes bcel version 6.4.1-9.el9_0.