Red Hat Security AdvisoryRHSA-2014:1166
jakarta-commons-httpclient security update
Released 2014-09-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10, jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386, jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64 +13
- Red Hat Enterprise Linux Client (v. 7) jakarta-commons-httpclient-1:3.1-16.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) jakarta-commons-httpclient-demo-1:3.1-16.el7_0, jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0, jakarta-commons-httpclient-manual-1:3.1-16.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) jakarta-commons-httpclient-1:3.1-16.el7_0, jakarta-commons-httpclient-demo-1:3.1-16.el7_0, jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10, jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386
- Red Hat Enterprise Linux Desktop (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5, jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5, jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10, jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10, jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386 +4
- Red Hat Enterprise Linux HPC Node (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5, jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5, jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5 +1
- Red Hat Enterprise Linux Server (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5
- Red Hat Enterprise Linux Server (v. 7) jakarta-commons-httpclient-1:3.1-16.el7_0
- Red Hat Enterprise Linux Server Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5, jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5, jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5 +1
- Red Hat Enterprise Linux Server Optional (v. 7) jakarta-commons-httpclient-1:3.1-16.el7_0, jakarta-commons-httpclient-demo-1:3.1-16.el7_0, jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0 +1
- Red Hat Enterprise Linux Workstation (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5
- Red Hat Enterprise Linux Workstation (v. 7) jakarta-commons-httpclient-1:3.1-16.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 6) jakarta-commons-httpclient-1:3.1-0.9.el6_5, jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5, jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) jakarta-commons-httpclient-demo-1:3.1-16.el7_0, jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0, jakarta-commons-httpclient-manual-1:3.1-16.el7_0
Fixes 1 record
Priority LOW 38
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09189 · Published 2014-08-21 · Partial fix · 4.3.5 CWE-347
