Apache Commons BCEL: Remote Code Execution — GLSA 202405-16

A vulnerability has been discovered in Apache Commons BCEL, which can lead to remote code execution.

Affected packages

Background

The Byte Code Engineering Library (Apache Commons BCEL™) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).

Description

A vulnerability has been discovered in U-Boot tools. Please review the CVE identifier referenced below for details.

Impact

Please review the referenced CVE identifier for details.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-java/bcel-6.6.0"
 

References

• CVE-2022-34169
• CVE-2022-42920

Release date
May 05, 2024

Latest revision
May 05, 2024: 1

Severity
normal

Exploitable
remote

Bugzilla entries

• 880447