Most recent entries from all

ALSA-2022:1860 — Moderate: maven:3.6 security and enhancement update

Affected: AlmaLinux:8: aopalliance, AlmaLinux:8: apache-commons-cli, AlmaLinux:8: apache-commons-codec, AlmaLinux:8: apache-commons-io, AlmaLinux:8: apache-commons-lang3, AlmaLinux:8: atinject, AlmaLinux:8: cdi-api, AlmaLinux:8: geronimo-annotation, AlmaLinux:8: google-guice, AlmaLinux:8: guava and 22 more

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-05212

certfr-2021-avi-556 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu…

certfr-2021-avi-556

cnvd-2021-24248

EUVD-2026-262110

fkie_cve-2020-13956

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

GHSA-7r82-7xv7-xcpj — Cross-site scripting in Apache HttpClient

Affected: Maven: org.apache.httpcomponents:httpclient

gsd-2020-13956

openSUSE-SU-2024:10687-1 — clojure-1.10.3.855-1.2 on GA media

clojure-1.10.3.855-1.2 on GA media

RHSA-2021:0084 — Red Hat Security Advisory: Red Hat build of Quarkus 1.7.6 release and security update

apache-httpclient: incorrect handling of malformed authority component in request URIs

SUSE-SU-2024:4036-1 — Security update for httpcomponents-client, httpcomponents-core

Security update for httpcomponents-client, httpcomponents-core

UBUNTU-CVE-2020-13956

Affected: Ubuntu:Pro:14.04:LTS: httpcomponents-client, Ubuntu:Pro:16.04:LTS: httpcomponents-client, Ubuntu:Pro:18.04:LTS: httpcomponents-client, Ubuntu:Pro:20.04:LTS: httpcomponents-client

WID-SEC-W-2022-0044 — Apache HttpComponents: Schwachstelle ermöglicht Täuschung des Nutzers

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um den Nutzer zu täuschen.