Issued at: 2025-10-04
Updated at: 2025-10-10
Synopsis
Important: apache-commons-beanutils security update
Description
The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans.
Security Fix(es):
* commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9.6 aarch64
Rocky Linux 9.6 ppc64le
Rocky Linux 9.6 s390x
Rocky Linux 9.6 x86_64
Fixes
2368956
CVEs
CVE-2025-48734
Affected packages
Rocky Linux 9.6 aarch64 - CRB
apache-commons-beanutils-0:1.9.4-10.el9_6.noarch.rpm
apache-commons-beanutils-0:1.9.4-10.el9_6.src.rpm
Rocky Linux 9.6 ppc64le - CRB
apache-commons-beanutils-0:1.9.4-10.el9_6.noarch.rpm
apache-commons-beanutils-0:1.9.4-10.el9_6.src.rpm
Rocky Linux 9.6 s390x - CRB
apache-commons-beanutils-0:1.9.4-10.el9_6.noarch.rpm
apache-commons-beanutils-0:1.9.4-10.el9_6.src.rpm
Rocky Linux 9.6 x86_64 - CRB
apache-commons-beanutils-0:1.9.4-10.el9_6.noarch.rpm
apache-commons-beanutils-0:1.9.4-10.el9_6.src.rpm