bcel-5.2-19.0.1.el7.AXS7

The Byte Code Engineering Library (Apache Commons BCEL) is intended to give
users a convenient way to analyze, create, and manipulate (binary) Java class
files (those ending with .class).

Security Fix(es):

* Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
(CVE-2022-42920)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2022-42920
Apache Commons BCEL has a number of APIs that would normally only allow changing
specific class characteristics. However, due to an out-of-bounds writing issue,
these APIs can be used to produce arbitrary bytecode. This could be abused in
applications that pass attacker-controllable data to those APIs, giving the
attacker more control over the resulting bytecode than otherwise expected.
Update to Apache Commons BCEL 6.6.0.