Summary
[1:3.1-16]
- Fix MITM security vulnerability
- Resolves: CVE-2014-3577
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | jakarta-commons-httpclient | 1:3.1-16.el7_0 |
| Oracle Linux · 7 | jakarta-commons-httpclient-demo | 1:3.1-16.el7_0 |
| Oracle Linux · 7 | jakarta-commons-httpclient-javadoc | 1:3.1-16.el7_0 |
| Oracle Linux · 7 | jakarta-commons-httpclient-manual | 1:3.1-16.el7_0 |
Vulnerabilities 1
-
Medium —
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th…