-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-0e358addb8 2022-12-11 01:39:26.469686 --------------------------------------------------------------------------------
Name : bcel Product : Fedora 36 Version : 6.4.1 Release : 10.fc36 URL : http://commons.apache.org/proper/commons-bcel/ Summary : Byte Code Engineering Library Description : The Byte Code Engineering Library (formerly known as JavaClass) is intended to give users a convenient possibility to analyze, create, and manipulate (binary) Java class files (those ending with .class). Classes are represented by objects which contain all the symbolic information of the given class: methods, fields and byte code instructions, in particular. Such objects can be read from an existing file, be transformed by a program (e.g. a class loader at run-time) and dumped to a file again. An even more interesting application is the creation of classes from scratch at run-time. The Byte Code Engineering Library (BCEL) may be also useful if you want to learn about the Java Virtual Machine (JVM) and the format of Java .class files. BCEL is already being used successfully in several projects such as compilers, optimizers, obsfuscators and analysis tools, the most popular probably being the Xalan XSLT processor at Apache.
-------------------------------------------------------------------------------- Update Information:
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 1 2022 Mikolaj Izdebski mizdebsk@redhat.com - 6.4.1-10 - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2142728 - CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing [fedora-36] https://bugzilla.redhat.com/show_bug.cgi?id=2142728 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-0e358addb8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------