Lucene search

K
debianDebianDEBIAN:DLA-443-1:91EA1
HistoryFeb 29, 2016 - 2:56 p.m.

[SECURITY] [DLA 443-1] bsh security update

2016-02-2914:56:19
lists.debian.org
8

Package : bsh
Version : 2.0b4-12+deb6u1
CVE ID : CVE-2016-2510

A remote code execution vulnerability was found in BeanShell, an
embeddable Java source interpreter with object scripting language
features.

CVE-2016-2510:
An application that includes BeanShell on the classpath may be
vulnerable if another part of the application uses Java
serialization or XStream to deserialize data from an untrusted
source. A vulnerable application could be exploited for remote
code execution, including executing arbitrary shell commands.

For Debian 6 "Squeeze", these problems have been fixed in version
2.0b4-12+deb6u1.

We recommend that you upgrade your bsh packages.