(RHSA-2015:1695) Important: jakarta-taglibs-standard security update

2015-08-3100:00:00

access.redhat.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.054 Low

EPSS

Percentile

92.0%

JSON

jakarta-taglibs-standard is the Java Standard Tag Library (JSTL).
This library is used in conjunction with Tomcat and Java Server Pages
(JSP).

It was found that the Java Standard Tag Library (JSTL) allowed the
processing of untrusted XML documents to utilize external entity
references, which could access resources on the host system and,
potentially, allowing arbitrary code execution. (CVE-2015-0254)

Note: jakarta-taglibs-standard users may need to take additional steps
after applying this update. Detailed instructions on the additional steps
can be found here:

https://access.redhat.com/solutions/1584363

All jakarta-taglibs-standard users are advised to upgrade to these updated
packages, which contain a backported patch to correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHat6noarchjakarta-taglibs-standard< 1.1.1-11.7.el6_7jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm
RedHat7noarchjakarta-taglibs-standard-javadoc< 1.1.2-14.el7_1jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm
RedHat7srcjakarta-taglibs-standard< 1.1.2-14.el7_1jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm
RedHat6srcjakarta-taglibs-standard< 1.1.1-11.7.el6_7jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm
RedHat7noarchjakarta-taglibs-standard< 1.1.2-14.el7_1jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm
RedHat6noarchjakarta-taglibs-standard-javadoc< 1.1.1-11.7.el6_7jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	noarch	jakarta-taglibs-standard	< 1.1.1-11.7.el6_7	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm
RedHat	7	noarch	jakarta-taglibs-standard-javadoc	< 1.1.2-14.el7_1	jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm
RedHat	7	src	jakarta-taglibs-standard	< 1.1.2-14.el7_1	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm
RedHat	6	src	jakarta-taglibs-standard	< 1.1.1-11.7.el6_7	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm
RedHat	7	noarch	jakarta-taglibs-standard	< 1.1.2-14.el7_1	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm
RedHat	6	noarch	jakarta-taglibs-standard-javadoc	< 1.1.1-11.7.el6_7	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm