Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::client | jakarta-taglibs-standard | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 6 enterprise_linux:6::client | jakarta-taglibs-standard-javadoc | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | jakarta-taglibs-standard | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | jakarta-taglibs-standard-javadoc | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 6 enterprise_linux:6::server | jakarta-taglibs-standard | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 6 enterprise_linux:6::server | jakarta-taglibs-standard-javadoc | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | jakarta-taglibs-standard | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | jakarta-taglibs-standard-javadoc | 0:1.1.1-11.7.el6_7 |
| Red Hat · RHEL 7 enterprise_linux:7::client | jakarta-taglibs-standard | 0:1.1.2-14.el7_1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | jakarta-taglibs-standard-javadoc | 0:1.1.2-14.el7_1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | jakarta-taglibs-standard | 0:1.1.2-14.el7_1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | jakarta-taglibs-standard-javadoc | 0:1.1.2-14.el7_1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | jakarta-taglibs-standard | 0:1.1.2-14.el7_1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | jakarta-taglibs-standard-javadoc | 0:1.1.2-14.ael7b_1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | jakarta-taglibs-standard | 0:1.1.2-14.el7_1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | jakarta-taglibs-standard-javadoc | 0:1.1.2-14.el7_1 |
Vulnerabilities 1
-
High —CVE-2015-0254 EPSS 12%
XXE in Apache Standard Taglibs
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/solutions/1584363
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1198606
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1695.json
-
report
https://access.redhat.com/security/cve/CVE-2015-0254
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-0254
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-0254