bcel-6.4.1-9.el9
エラータID: AXSA:2023-4861:01
リリース日:
2023/01/26 Thursday - 05:06
題名:
bcel-6.4.1-9.el9
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- bcel には、境界外書き込みの問題があるため、攻撃者によって制御
可能なデータを介して、任意のバイトコード生成を可能とする脆弱性
が存在します。(CVE-2022-42920)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2022-42920
Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.
Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.
追加情報:
N/A
ダウンロード:
SRPMS
- bcel-6.4.1-9.el9.src.rpm
MD5: 142525b3902e957815a97de6052d907e
SHA-256: e4d576ce47c0bfc52ab2a718ab42b9e4549590c2f396d41e19b8ee68ed9567c8
Size: 967.37 kB
Asianux Server 9 for x86_64
- bcel-6.4.1-9.el9.noarch.rpm
MD5: 9a092582c29b2ee59fb456df0d24bf70
SHA-256: a49702993bd4e363a501941df4657ec147d5ad56a3ddfcb19e5445b7326ca3b4
Size: 629.31 kB
English