Red Hat Security AdvisoryRHSA-2014:1146
httpcomponents-client security update
Released 2014-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) httpcomponents-client-4.2.5-5.el7_0, httpcomponents-client-javadoc-4.2.5-5.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) httpcomponents-client-4.2.5-5.el7_0, httpcomponents-client-javadoc-4.2.5-5.el7_0
- Red Hat Enterprise Linux Server (v. 7) httpcomponents-client-4.2.5-5.el7_0
- Red Hat Enterprise Linux Server Optional (v. 7) httpcomponents-client-4.2.5-5.el7_0, httpcomponents-client-javadoc-4.2.5-5.el7_0
- Red Hat Enterprise Linux Workstation (v. 7) httpcomponents-client-4.2.5-5.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 7) httpcomponents-client-javadoc-4.2.5-5.el7_0
Fixes 1 record
Priority LOW 38
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09189 · Published 2014-08-21 · Partial fix · 4.3.5 CWE-347
