{"id":"SUSE-SU-2016:0228-1","aliases":[],"status":"published","title":"Security update for apache-commons-collections","description":"This update to apache-commons-collections 3.2.2 fixes the following security issues:\n\n* bsc#954102: code execution by unserialization","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-01-25T10:14:44Z","modified":"2016-01-25T10:14:44Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"apache-commons-collections","fixed_in":["3.2.2-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"apache-commons-collections","fixed_in":["3.2.2-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"apache-commons-collections","fixed_in":["3.2.2-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"apache-commons-collections","fixed_in":["3.2.2-6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-6.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160228-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/954102","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2016:0228-1","title":"Security update for apache-commons-collections","description":"\nThis update to apache-commons-collections 3.2.2 fixes the following security issues:\n\n* bsc#954102: code execution by unserialization\n","status":"published","published":"2016-01-25T10:14:44Z","modified":"2016-01-25T10:14:44Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}