[SECURITY] Fedora 32 Update: resteasy-3.0.26-6.fc32
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-239503f5fa
2020-12-09 01:22:22.200655
--------------------------------------------------------------------------------
Name : resteasy
Product : Fedora 32
Version : 3.0.26
Release : 6.fc32
URL : http://resteasy.jboss.org/
Summary : Framework for RESTful Web services and Java applications
Description :
RESTEasy contains a JBoss project that provides frameworks to help
build RESTful Web Services and RESTful Java applications. It is a fully
certified and portable implementation of the JAX-RS specification.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-1695
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 30 2020 Alexander Scheel <ascheel(a)redhat.com> - 3.0.26-6
- CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java
class
Resolves: rh-bz#1845547
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1730462 - CVE-2020-1695 resteasy: Improper validation of response header in
MediaTypeHeaderDelegate.java class
https://bugzilla.redhat.com/show_bug.cgi?id=1730462
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-239503f5fa' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------