bsh - security update

A remote code execution vulnerability was found in BeanShell, an
embeddable Java source interpreter with object scripting language
features.

• CVE-2016-2510
  An application that includes BeanShell on the classpath may be
  vulnerable if another part of the application uses Java
  serialization or XStream to deserialize data from an untrusted
  source. A vulnerable application could be exploited for remote
  code execution, including executing arbitrary shell commands.

For Debian 6 Squeeze, these problems have been fixed in version
2.0b4-12+deb6u1.

We recommend that you upgrade your bsh packages.