Skip to content
OpenAdvisories
Unscored RHSA-2014:1011 1 CVE

Red Hat Security Advisory: resteasy-base security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-atom-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-jackson-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-javadoc 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-jaxb-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-jaxrs 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-jaxrs-all 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-jaxrs-api 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-jettison-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-providers-pom 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client resteasy-base-tjws 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-atom-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-jackson-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-javadoc 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-jaxb-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-jaxrs 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-jaxrs-all 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-jaxrs-api 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-jettison-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-providers-pom 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode resteasy-base-tjws 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-atom-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-jackson-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-javadoc 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-jaxb-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-jaxrs 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-jaxrs-all 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-jaxrs-api 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-jettison-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-providers-pom 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server resteasy-base-tjws 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-atom-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-jackson-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-javadoc 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-jaxb-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-jaxrs 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-jaxrs-all 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-jaxrs-api 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-jettison-provider 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-providers-pom 0:2.3.5-3.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation resteasy-base-tjws 0:2.3.5-3.el7_0

Vulnerabilities 1

  • High —
    CVE-2014-3490

    Incorrect Privilege Assignment in RESTEasy

    RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote a…

    org.jboss.resteasy:resteasy-client Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1107901
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1011.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3490
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3490
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3490