Lucene search
SuseOPENSUSE-SU-2016:0788-1HistoryMar 16, 2016 - 7:12 p.m.
Security update for bsh2 (important)
2016-03-1619:12:08
lists.opensuse.org
10
0.118 Low
EPSS
Percentile
94.7%
This update for bsh2 fixes the following issues:
- CVE-2016-2510: An application that includes BeanShell on the classpath
may be vulnerable if another part of the application uses Java
serialization or XStream to deserialize data from an untrusted source.
Please see <a href=“https://github.com/beanshell/beanshell/releases/tag/2.0b6”>https://github.com/beanshell/beanshell/releases/tag/2.0b6</a> for
more information.
This update was imported from the SUSE:SLE-12:Update update project.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 42.1 | noarch | bsh2-src | < 2.0.0.b5-30.1 | bsh2-src-2.0.0.b5-30.1.noarch.rpm |
| openSUSE Leap | 42.1 | noarch | bsh2-manual | < 2.0.0.b5-30.1 | bsh2-manual-2.0.0.b5-30.1.noarch.rpm |
| openSUSE Leap | 42.1 | noarch | bsh2-demo | < 2.0.0.b5-30.1 | bsh2-demo-2.0.0.b5-30.1.noarch.rpm |
| openSUSE Leap | 42.1 | noarch | bsh2-bsf | < 2.0.0.b5-30.1 | bsh2-bsf-2.0.0.b5-30.1.noarch.rpm |
| openSUSE Leap | 42.1 | noarch | bsh2-classgen | < 2.0.0.b5-30.1 | bsh2-classgen-2.0.0.b5-30.1.noarch.rpm |
| openSUSE Leap | 42.1 | noarch | bsh2 | < 2.0.0.b5-30.1 | bsh2-2.0.0.b5-30.1.noarch.rpm |
| openSUSE Leap | 42.1 | noarch | bsh2-javadoc | < 2.0.0.b5-30.1 | bsh2-javadoc-2.0.0.b5-30.1.noarch.rpm |
References
Related
ibm
ibm
nessus
nessus
openSUSE Security Update : bsh2 (openSUSE-2016-370)
2016-03-21 00:00:00
openSUSE Security Update : bsh2 (openSUSE-2016-351)
2016-03-17 00:00:00
GLSA-201607-17 : BeanShell: Arbitrary code execution
2016-08-01 00:00:00
redhat
redhat
(RHSA-2016:0540) Important: Red Hat JBoss BRMS 6.2.2 update
2016-03-30 18:15:45
(RHSA-2016:0539) Important: Red Hat JBoss BPM Suite 6.2.2 update
2016-03-30 18:15:42
prion
prion
Xxe
2016-04-07 20:59:00
ubuntucve
ubuntucve
CVE-2016-2510
2016-02-19 00:00:00
cve
cve
CVE-2016-2510
2016-04-07 20:59:00
gentoo
gentoo
BeanShell: Arbitrary code execution
2016-07-30 00:00:00
debian
debian
[SECURITY] [DLA 443-1] bsh security update
2016-02-29 14:56:19
[SECURITY] [DSA 3504-1] bsh security update
2016-03-04 15:55:42
[SECURITY] [DSA 3504-1] bsh security update
2016-03-04 15:55:42
openvas
openvas
Debian Security Advisory DSA 3504-1 (bsh - security update)
2016-03-08 00:00:00
Debian: Security Advisory (DLA-443-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2923-1)
2016-03-10 00:00:00
github
github
Improper Input Validation in BeanShell
2022-05-13 01:14:25
osv
osv
bsh - security update
2016-03-04 00:00:00
Improper Input Validation in BeanShell
2022-05-13 01:14:25
bsh - security update
2016-02-29 00:00:00
suse
suse
Security update for bsh2 (important)
2016-03-19 16:12:13
Security update for bsh2 (important)
2016-03-09 12:12:03
Security update for bsh2 (important)
2016-03-09 12:12:28
debiancve
debiancve
CVE-2016-2510
2016-04-07 20:59:00
ubuntu
ubuntu
BeanShell vulnerability
2016-03-08 00:00:00
freebsd
freebsd
bsh -- remote code execution vulnerability
2016-02-18 00:00:00
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00