ELSA-2015-1695

ELSA-2015-1695 - jakarta-taglibs-standard security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2015-08-31

Description

[0:1.1.1-11.7]
- Gracefully handle parsers without FSP support (e.g. Java 5 GCJ)
- Resolves: CVE-2015-0254

[0:1.1.1-11.6]
- Prevent XXE and RCE in JSTL XML tags
- Apply correction for previous CVE-2015-0254 patch (prevent XXE in )
- Resolves: CVE-2015-0254

[0:1.1.1-11.5]
- Prevent XXE and RCE in JSTL XML tags
- Resolves: CVE-2015-0254

Related CVEs

CVE-2015-0254

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_i386_latest
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_i386_latest_archive
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_u7_i386_patch
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_u8_i386_base
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_u9_i386_base
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_i386_latest
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_i386_latest_archive
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_u7_i386_patch
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_u8_i386_base
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_u9_i386_base
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_i386_latest
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_i386_latest_archive
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_u7_i386_patch
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_u8_i386_base
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_u9_i386_base
Oracle Linux 6 (x86_64)	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_u7_x86_64_patch
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_u8_x86_64_base
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_u9_x86_64_base
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_x86_64_latest
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm	1ec9579ac302571c19e2de46b7ca5f8f6153d3403fa89ba38029ebf7034f470f	ELBA-2018-1885	ol6_x86_64_latest_archive
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_u7_x86_64_patch
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_u8_x86_64_base
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_u9_x86_64_base
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_x86_64_latest
	jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm	d94fd7b86a3e213171e7abc0a1633e52776c0088640e2584b6d3616b4bd6e8cc	ELBA-2018-1885	ol6_x86_64_latest_archive
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_u7_x86_64_patch
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_u8_x86_64_base
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_u9_x86_64_base
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_x86_64_latest
	jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm	b1163d2442ba70b86958d41eb8cbb91e17c89c931c45c05a9dc471648e6ab16c	ELBA-2018-1885	ol6_x86_64_latest_archive
Oracle Linux 7 (aarch64)	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_beta
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_latest
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_optional_beta
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_optional_latest
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_u5_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_u7_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_u8_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_aarch64_u9_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_aarch64_beta
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_aarch64_latest
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_aarch64_u5_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_aarch64_u7_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_aarch64_u8_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_aarch64_u9_base
	jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm	3424e2fd6209e111cdc78fa715ad22f95699aa1e7452c853d49ecbe4747a95ba	-	ol7_aarch64_optional_beta
	jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm	3424e2fd6209e111cdc78fa715ad22f95699aa1e7452c853d49ecbe4747a95ba	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_beta
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_latest
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_latest_archive
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_optional_archive
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_optional_beta
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_optional_latest
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u1_patch
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u2_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u3_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u4_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u5_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u5_developer
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u6_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u7_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u8_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.src.rpm	b3c1b2114c081797725fd5f5b1bb0e00d8fb89009f884aaa119879ddc1a03c06	-	ol7_x86_64_u9_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_beta
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_latest
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_latest_archive
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u1_patch
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u2_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u3_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u4_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u5_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u5_developer
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u6_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u7_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u8_base
	jakarta-taglibs-standard-1.1.2-14.el7_1.noarch.rpm	25b760475cc26afb78ad95a55ec2ebacc14f3d337d195d8a16028073b961ded7	-	ol7_x86_64_u9_base
	jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm	3424e2fd6209e111cdc78fa715ad22f95699aa1e7452c853d49ecbe4747a95ba	-	ol7_x86_64_optional_archive
	jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm	3424e2fd6209e111cdc78fa715ad22f95699aa1e7452c853d49ecbe4747a95ba	-	ol7_x86_64_optional_beta
	jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm	3424e2fd6209e111cdc78fa715ad22f95699aa1e7452c853d49ecbe4747a95ba	-	ol7_x86_64_optional_developer
	jakarta-taglibs-standard-javadoc-1.1.2-14.el7_1.noarch.rpm	3424e2fd6209e111cdc78fa715ad22f95699aa1e7452c853d49ecbe4747a95ba	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team