-----BEGIN PGP SIGNATURE-----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=Yu2+
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6936-1
July 31, 2024
libcommons-collections3-java vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 LTS
Summary:
Apache Commons Collections could be made to execute arbitrary code if it
received specially crafted input.
Software Description:
- libcommons-collections3-java: Apache Commons Collections - Extended
Collections API for Java
Details:
It was discovered that Apache Commons Collections allowed serialization
support for unsafe classes by default. A remote attacker could possibly
use this issue to execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 LTS
libcommons-collections3-java 3.2.1-6ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6936-1
CVE-2015-4852
No comments:
Post a Comment