Security update for jakarta-taglibs-standard (important)

2017-06-1500:09:02

lists.opensuse.org

0.054 Low

EPSS

Percentile

92.3%

JSON

This update for jakarta-taglibs-standard fixes the following issues:

CVE-2015-0254: Apache Standard Taglibs allowed remote attackers to
execute arbitrary code or conduct external XML entity (XXE) attacks via
a crafted XSLT extension in a (1) x:parse or (2) x:transform JSTL XML
tag. (bsc#920813)

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Server12.2noarchjakarta-taglibs-standard< 1.1.1-255.2jakarta-taglibs-standard-1.1.1-255.2.noarch.rpm
SUSE Linux Enterprise Server12.2noarchjakarta-taglibs-standard-javadoc< 1.1.1-255.2jakarta-taglibs-standard-javadoc-1.1.1-255.2.noarch.rpm
SUSE Linux Enterprise Server for Raspberry Pi12.2noarchjakarta-taglibs-standard-javadoc< 1.1.1-255.2jakarta-taglibs-standard-javadoc-1.1.1-255.2.noarch.rpm
SUSE Linux Enterprise Server for Raspberry Pi12.2noarchjakarta-taglibs-standard< 1.1.1-255.2jakarta-taglibs-standard-1.1.1-255.2.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Server	12.2	noarch	jakarta-taglibs-standard	< 1.1.1-255.2	jakarta-taglibs-standard-1.1.1-255.2.noarch.rpm
SUSE Linux Enterprise Server	12.2	noarch	jakarta-taglibs-standard-javadoc	< 1.1.1-255.2	jakarta-taglibs-standard-javadoc-1.1.1-255.2.noarch.rpm
SUSE Linux Enterprise Server for Raspberry Pi	12.2	noarch	jakarta-taglibs-standard-javadoc	< 1.1.1-255.2	jakarta-taglibs-standard-javadoc-1.1.1-255.2.noarch.rpm
SUSE Linux Enterprise Server for Raspberry Pi	12.2	noarch	jakarta-taglibs-standard	< 1.1.1-255.2	jakarta-taglibs-standard-1.1.1-255.2.noarch.rpm