Red Hat Security AdvisoryRHSA-2013:0270
jakarta-commons-httpclient security update
Released 2013-02-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) jakarta-commons-httpclient-1:3.0-7jpp.2, jakarta-commons-httpclient-1:3.0-7jpp.2.i386, jakarta-commons-httpclient-1:3.0-7jpp.2.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3, jakarta-commons-httpclient-demo-1:3.1-0.7.el6_3, jakarta-commons-httpclient-javadoc-1:3.1-0.7.el6_3 +1
- Red Hat Enterprise Linux HPC Node (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3, jakarta-commons-httpclient-demo-1:3.1-0.7.el6_3, jakarta-commons-httpclient-javadoc-1:3.1-0.7.el6_3 +1
- Red Hat Enterprise Linux Server (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3, jakarta-commons-httpclient-demo-1:3.1-0.7.el6_3, jakarta-commons-httpclient-javadoc-1:3.1-0.7.el6_3 +1
- Red Hat Enterprise Linux Workstation (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.7.el6_3, jakarta-commons-httpclient-demo-1:3.1-0.7.el6_3, jakarta-commons-httpclient-javadoc-1:3.1-0.7.el6_3 +1
Fixes 1 record
Priority LOW 38
Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09254 · Published 2012-11-04 · Partial fix CWE-295
