Back Linuxsecurity

Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322

Linuxsecurity •LinuxSecurity Advisories • July 23, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

USN-8322-1 introduced a regression in Apache Commons BeanUtils Software Description: - commons-beanutils: Apache Commons BeanUtils - Utility for manipulating Java beans Details: USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a fix for CVE-2014-0114 and CVE-2019-10086 was incorrectly dropped. This update reintroduces the fix for CVE-2014-0114 and CVE-2019-10086. We apologize for the inconvenience. Original advisory details: It was discovered that Apache Commons BeanUtils incorrectly allowed access to the declaredClass property of Java enum objects when handling externally supplied property paths. An attacker could possibly use this issue to execute arbitrary code.

USN-8322-1 introduced a regression in Apache Commons BeanUtils

Software Description:

- commons-beanutils: Apache Commons BeanUtils - Utility for manipulating Java beans

USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was

discovered that for Ubuntu 18.04 LTS, during the update preparation

phase, a fix for CVE-2014-0114 and CVE-2019-10086 was

incorrectly dropped. This update reintroduces the fix for

CVE-2014-0114 and CVE-2019-10086.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Apache Commons BeanUtils incorrectly allowed

access to the declaredClass property of Java enum objects when handling

externally supplied property paths. An attacker could possibly use this

issue to execute arbitrary code.

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS libcommons-beanutils-java 1.9.2-3ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2014-0114, CVE-2019-10086,

Ubuntu Security Notice USN-8322-2

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Apache Commons BeanUtils and mod_jk Affect Ubuntu 18.04 LTS Recent updates for Ubuntu 18.04 LTS revealed critical vulnerabilities in Apache Commons BeanUtils and mod_jk. The first issue, CVE-2014-0114 and CVE-2019-10086, allows attackers to execute arbitrary code due to improper property access. The second, CVE-2023-41081, exposes sensitive information or leads to denial of service via incorrect shared memory permissions. Both vulnerabilities were initially fixed in prior updates but were dropped during the update preparation phase. Users are advised to update their systems to mitigate these risks. The vulnerabilities impact systems running Ubuntu 18.04 LTS and require immediate attention from administrators. Ubuntu Pro provides extended security coverage for affected packages. 4 sources 72

Extracted Entities

Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)