portage-ng / portage / dev-java / bcel / 6.11.0
version « ‹ 6.11.0 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference dev-java/bcel · none place version 6.11.0 in a vulnerable range
▸ GLSA 202405-16 Apache Commons BCEL: Remote Code Execution this version unaffected normal remote 2024-05-05

A vulnerability has been discovered in Apache Commons BCEL, which can lead to remote code execution.

Announced
2024-05-05
Revised
2024-05-05
Access
remote
Bugs
#880447
Advisory
https://security.gentoo.org/glsa/202405-16

Affected packages

PackageArchVulnerableUnaffected
dev-java/bcel*< 6.6.0>= 6.6.0

Background

The Byte Code Engineering Library (Apache Commons BCEL™) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).

Description

A vulnerability has been discovered in U-Boot tools. Please review the CVE identifier referenced below for details.

Impact

Please review the referenced CVE identifier for details.

Workaround

There is no known workaround at this time.

Resolution

All Apache Commons BCEL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-java/bcel-6.6.0"

References