High ELSA-2017-2486 1 CVE

Important: groovy security update (Oracle Linux 7)

Published Aug 17, 2017 · Updated Aug 17, 2017

Ecosystem: Oracle Linux

Summary

[1.8.9-8]
- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	groovy	0:1.8.9-8.el7_4
Oracle Linux · 7	groovy-javadoc	0:1.8.9-8.el7_4

Vulnerabilities 1

Critical 9.8

CVE-2016-6814 EPSS 17%

Deserialization of Untrusted Data in Groovy

When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an att…

org.codehaus.groovy:groovy-all groovy groovy org.codehaus.groovy:groovy Debian Ubuntu Maven

Jan 18, 2018