OESA-2022-1483

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1483

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2022-1483.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2022-1483

Upstream

CVE-2020-1695

Published

2022-01-07T11:03:27Z

Modified

2025-08-12T05:05:32.037192Z

Summary

resteasy security update

Details

Framework for RESTful Web services and Java applications.

Security Fix(es):

A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.(CVE-2020-1695)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / resteasy

Package

Name: resteasy
Purl: pkg:rpm/openEuler/resteasy&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.19-5.oe1

Ecosystem specific

{
    "src": [
        "resteasy-3.0.19-5.oe1.src.rpm"
    ],
    "noarch": [
        "resteasy-optional-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jackson2-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-multipart-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jettison-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-json-p-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-netty3-3.0.19-5.oe1.noarch.rpm",
        "resteasy-atom-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-yaml-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jaxb-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-test-3.0.19-5.oe1.noarch.rpm",
        "resteasy-javadoc-3.0.19-5.oe1.noarch.rpm",
        "resteasy-3.0.19-5.oe1.noarch.rpm",
        "resteasy-client-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jackson-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-validator-provider-11-3.0.19-5.oe1.noarch.rpm",
        "resteasy-core-3.0.19-5.oe1.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP2 / resteasy

Package

Name: resteasy
Purl: pkg:rpm/openEuler/resteasy&distro=openEuler-20.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.19-5.oe1

Ecosystem specific

{
    "src": [
        "resteasy-3.0.19-5.oe1.src.rpm"
    ],
    "noarch": [
        "resteasy-optional-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jackson-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-json-p-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-yaml-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-core-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jaxb-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-multipart-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jettison-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-javadoc-3.0.19-5.oe1.noarch.rpm",
        "resteasy-client-3.0.19-5.oe1.noarch.rpm",
        "resteasy-validator-provider-11-3.0.19-5.oe1.noarch.rpm",
        "resteasy-atom-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jackson2-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-test-3.0.19-5.oe1.noarch.rpm",
        "resteasy-netty3-3.0.19-5.oe1.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / resteasy

Package

Name: resteasy
Purl: pkg:rpm/openEuler/resteasy&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.19-5.oe1

Ecosystem specific

{
    "src": [
        "resteasy-3.0.19-5.oe1.src.rpm"
    ],
    "noarch": [
        "resteasy-optional-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jackson-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-json-p-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-yaml-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-core-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jaxb-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-multipart-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jettison-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-javadoc-3.0.19-5.oe1.noarch.rpm",
        "resteasy-client-3.0.19-5.oe1.noarch.rpm",
        "resteasy-validator-provider-11-3.0.19-5.oe1.noarch.rpm",
        "resteasy-atom-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-3.0.19-5.oe1.noarch.rpm",
        "resteasy-jackson2-provider-3.0.19-5.oe1.noarch.rpm",
        "resteasy-test-3.0.19-5.oe1.noarch.rpm",
        "resteasy-netty3-3.0.19-5.oe1.noarch.rpm"
    ]
}