Red Hat Security AdvisoryRHSA-2015:1695
jakarta-taglibs-standard security update
Released 2015-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) jakarta-taglibs-standard-1.1.2-14.el7_1, jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) jakarta-taglibs-standard-1.1.2-14.el7_1, jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1
- Red Hat Enterprise Linux Desktop Optional (v. 6) jakarta-taglibs-standard-1.1.1-11.7.el6_7, jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) jakarta-taglibs-standard-1.1.1-11.7.el6_7, jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7
- Red Hat Enterprise Linux Server (v. 7) jakarta-taglibs-standard-1.1.2-14.ael7b_1, jakarta-taglibs-standard-1.1.2-14.el7_1
- Red Hat Enterprise Linux Server Optional (v. 6) jakarta-taglibs-standard-1.1.1-11.7.el6_7, jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7
- Red Hat Enterprise Linux Server Optional (v. 7) jakarta-taglibs-standard-1.1.2-14.el7_1, jakarta-taglibs-standard-javadoc-1.1.2-14.ael7b_1, jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1
- Red Hat Enterprise Linux Workstation (v. 7) jakarta-taglibs-standard-1.1.2-14.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 6) jakarta-taglibs-standard-1.1.1-11.7.el6_7, jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1
Fixes 1 record
Priority MEDIUM 55
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.1204 · Published 2015-03-09 · Partial fix · 1.2.3 CWE-611
