SUSE-SU-2019:2245-1

HIGH7.3

Security update for apache-commons-beanutils

Published Aug 28, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for apache-commons-beanutils fixes the following issues:

Security issue fixed:

CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects (bsc#1146657).

Affected Packages

apache-commons-beanutils

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise Module for Web and Scripting 15SUSE Linux Enterprise Module for Web and Scripting 15 SP1

Fixed in:

1.9.2-4.3.1

References

ADVISORY

https://bugzilla.suse.com/1146657

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-August/005858.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-10086/

WEB

https://www.suse.com/support/security/rating/

ADVISORY