Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora: 25 Moderate: cxf Timing Attack Security Advisory

fedora
Calendar Grey March 2, 2017
Dist Fedora Esm H88
The latest Fedora 25 release tackles a critical vulnerability in the cxf framework linked to CVE-2017-3156, significantly bolstering the security posture of the operating system.
fix CVE-2017-3156 (rhbz#1425455,1425458)

Summary

Apache CXF is an open-source services framework that aids in

the development of services using front-end programming APIs,

like JAX-WS and JAX-RS.

Update Information:

fix CVE-2017-3156 (rhbz#1425455,1425458)

Topics%20covered

Topics Covered

security advisory security update Fedora timing attack cxf

Change Log

References


[ 1 ] Bug #1425455 - CVE-2017-3156 cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks https://bugzilla.redhat.com/show_bug.cgi?id=1425455

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade cxf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: cxf
Product: Fedora 25
Version: 3.1.6
Release: 5.fc25
URL: https://cxf.apache.org/
Summary: Apache CXF

Topics%20covered

Topics Covered

security advisory security update Fedora timing attack cxf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here