Red Hat Security AdvisoryRHSA-2014:1011
resteasy-base security update
Released 2014-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) resteasy-base-2.3.5-3.el7_0, resteasy-base-atom-provider-2.3.5-3.el7_0, resteasy-base-jackson-provider-2.3.5-3.el7_0 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) resteasy-base-2.3.5-3.el7_0, resteasy-base-atom-provider-2.3.5-3.el7_0, resteasy-base-jackson-provider-2.3.5-3.el7_0 +8
- Red Hat Enterprise Linux Server (v. 7) resteasy-base-2.3.5-3.el7_0, resteasy-base-atom-provider-2.3.5-3.el7_0, resteasy-base-jaxb-provider-2.3.5-3.el7_0 +3
- Red Hat Enterprise Linux Server Optional (v. 7) resteasy-base-2.3.5-3.el7_0, resteasy-base-jackson-provider-2.3.5-3.el7_0, resteasy-base-javadoc-2.3.5-3.el7_0 +3
- Red Hat Enterprise Linux Workstation (v. 7) resteasy-base-2.3.5-3.el7_0, resteasy-base-atom-provider-2.3.5-3.el7_0, resteasy-base-jaxb-provider-2.3.5-3.el7_0 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) resteasy-base-2.3.5-3.el7_0, resteasy-base-jackson-provider-2.3.5-3.el7_0, resteasy-base-javadoc-2.3.5-3.el7_0 +3
Fixes 1 record
Priority MEDIUM 40
RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04572 · Published 2014-08-19 · Partial fix · 2.3.8.SP2, 3.0.9.Final CWE-266
