Red Hat Security Advisory

RHSA-2022:8958

bcel security update

Released 2022-12-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) bcel-5.2-19.el7_9, bcel-javadoc-5.2-19.el7_9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bcel-5.2-19.el7_9, bcel-javadoc-5.2-19.el7_9
Red Hat Enterprise Linux Server (v. 7) bcel-5.2-19.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) bcel-5.2-19.el7_9, bcel-javadoc-5.2-19.el7_9
Red Hat Enterprise Linux Workstation (v. 7) bcel-5.2-19.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) bcel-javadoc-5.2-19.el7_9

TI-2022-20909 CVE-2022-42920 · GHSA-97xg-phpr-rg8q

MEDIUM 48

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03501 Published 2022-11-07 Partial fix · 6.6.0 CWE-787