Red Hat Product Errata RHSA-2013:0683 - Security Advisory
Issued:
2013-03-25
Updated:
2013-03-25

RHSA-2013:0683 - Security Advisory

Synopsis

Moderate: axis security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated axis packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

Apache Axis is an implementation of SOAP (Simple Object Access Protocol).
It can be used to build both web service clients and servers.

Apache Axis did not verify that the server hostname matched the domain name
in the subject's Common Name (CN) or subjectAltName field in X.509
certificates. This could allow a man-in-the-middle attacker to spoof an SSL
server if they had a certificate that was valid for any domain name.
(CVE-2012-5784)

All users of axis are advised to upgrade to these updated packages, which
correct this issue. Applications using Apache Axis must be restarted for
this update to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.9 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.9 i386
  • Red Hat Enterprise Linux Server from RHUI 5 i386
  • Red Hat Enterprise Linux Server - AUS 5.9 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.9 ia64
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.9 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.9 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.9 i386
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.9 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.9 i386

Fixes

  • BZ - 873252 - CVE-2012-5784 axis: Does not verify that the server hostname matches a domain name in the subject's CN or subjectAltName field of the x.509 certificate

Red Hat Enterprise Linux Server 5

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
x86_64
axis-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e436edbabaff041bd7154d710c36d7471f91c5a1834394768a835137f8691208
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
axis-javadoc-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 54f8cc33988accf7a78d8a404fbe8c87139cb5f29147916db4de4bfd06fd134e
axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 58abd320ab6c86ced1ecb591c649481bb0ca56150514535f396f9068f3c6d3b2
ia64
axis-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: b292dde593c08cf5f88b492b9554e4f9fa62e57ad882aaf3ea0064989928164e
axis-debuginfo-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: ecbb182780fd4011d5ae11480f812f93ef2b5637721dea0cf3584deaa08058af
axis-javadoc-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: 7535ab55857da0d8af9f4c27d43d083dd7cc5a9433e074d63a6d350eb558cf39
axis-manual-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: 68853648cf48dafa8643b9ffa07c36e5e28b91ea95384f03f137e0c5e5cc5a6a
i386
axis-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: ba766f39c238ef4b36fe64296ecb1ac2a30b145b1d4af8ea2a79f9fe026a3f31
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b
axis-javadoc-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 26287d4463b900d2717ace8a0f2807b59a3bb0feeb37de79ce8a5bfc8074566b
axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 034e7cdd936b08474a29d4f3d86afbeb5fa28fa2f24780663d9d764f64d682bd

Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.9

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
x86_64
axis-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e436edbabaff041bd7154d710c36d7471f91c5a1834394768a835137f8691208
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
axis-javadoc-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 54f8cc33988accf7a78d8a404fbe8c87139cb5f29147916db4de4bfd06fd134e
axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 58abd320ab6c86ced1ecb591c649481bb0ca56150514535f396f9068f3c6d3b2
ia64
axis-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: b292dde593c08cf5f88b492b9554e4f9fa62e57ad882aaf3ea0064989928164e
axis-debuginfo-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: ecbb182780fd4011d5ae11480f812f93ef2b5637721dea0cf3584deaa08058af
axis-javadoc-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: 7535ab55857da0d8af9f4c27d43d083dd7cc5a9433e074d63a6d350eb558cf39
axis-manual-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: 68853648cf48dafa8643b9ffa07c36e5e28b91ea95384f03f137e0c5e5cc5a6a
i386
axis-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: ba766f39c238ef4b36fe64296ecb1ac2a30b145b1d4af8ea2a79f9fe026a3f31
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b
axis-javadoc-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 26287d4463b900d2717ace8a0f2807b59a3bb0feeb37de79ce8a5bfc8074566b
axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 034e7cdd936b08474a29d4f3d86afbeb5fa28fa2f24780663d9d764f64d682bd

Red Hat Enterprise Linux Server - AUS 5.9

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
x86_64
axis-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e436edbabaff041bd7154d710c36d7471f91c5a1834394768a835137f8691208
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
axis-javadoc-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 54f8cc33988accf7a78d8a404fbe8c87139cb5f29147916db4de4bfd06fd134e
axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 58abd320ab6c86ced1ecb591c649481bb0ca56150514535f396f9068f3c6d3b2
ia64
axis-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: b292dde593c08cf5f88b492b9554e4f9fa62e57ad882aaf3ea0064989928164e
axis-debuginfo-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: ecbb182780fd4011d5ae11480f812f93ef2b5637721dea0cf3584deaa08058af
axis-javadoc-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: 7535ab55857da0d8af9f4c27d43d083dd7cc5a9433e074d63a6d350eb558cf39
axis-manual-1.2.1-2jpp.7.el5_9.ia64.rpm SHA-256: 68853648cf48dafa8643b9ffa07c36e5e28b91ea95384f03f137e0c5e5cc5a6a
i386
axis-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: ba766f39c238ef4b36fe64296ecb1ac2a30b145b1d4af8ea2a79f9fe026a3f31
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b
axis-javadoc-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 26287d4463b900d2717ace8a0f2807b59a3bb0feeb37de79ce8a5bfc8074566b
axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 034e7cdd936b08474a29d4f3d86afbeb5fa28fa2f24780663d9d764f64d682bd

Red Hat Enterprise Linux Workstation 5

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
x86_64
axis-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e436edbabaff041bd7154d710c36d7471f91c5a1834394768a835137f8691208
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
axis-javadoc-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 54f8cc33988accf7a78d8a404fbe8c87139cb5f29147916db4de4bfd06fd134e
axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 58abd320ab6c86ced1ecb591c649481bb0ca56150514535f396f9068f3c6d3b2
i386
axis-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: ba766f39c238ef4b36fe64296ecb1ac2a30b145b1d4af8ea2a79f9fe026a3f31
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b
axis-javadoc-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 26287d4463b900d2717ace8a0f2807b59a3bb0feeb37de79ce8a5bfc8074566b
axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 034e7cdd936b08474a29d4f3d86afbeb5fa28fa2f24780663d9d764f64d682bd

Red Hat Enterprise Linux Desktop 5

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
x86_64
axis-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e436edbabaff041bd7154d710c36d7471f91c5a1834394768a835137f8691208
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
i386
axis-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: ba766f39c238ef4b36fe64296ecb1ac2a30b145b1d4af8ea2a79f9fe026a3f31
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
s390x
axis-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: f1fb5fe636dfdae2778c68b67f731a1d3406368503eba29218c484eb29a358ac
axis-debuginfo-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: 47e8d875d46f276e39e58627d26a13f31d2529e7e86ccc0eab18e4e1aeaf0e15
axis-javadoc-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: 275566e8983651a0e72a1d2e570daa42ac1212957fa12c10205a2e388aa4e3df
axis-manual-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: 8fbe3fb000a7694892201d65499736599a74b91c26dd58aa13d946a13fbcee39

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.9

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
s390x
axis-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: f1fb5fe636dfdae2778c68b67f731a1d3406368503eba29218c484eb29a358ac
axis-debuginfo-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: 47e8d875d46f276e39e58627d26a13f31d2529e7e86ccc0eab18e4e1aeaf0e15
axis-javadoc-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: 275566e8983651a0e72a1d2e570daa42ac1212957fa12c10205a2e388aa4e3df
axis-manual-1.2.1-2jpp.7.el5_9.s390x.rpm SHA-256: 8fbe3fb000a7694892201d65499736599a74b91c26dd58aa13d946a13fbcee39

Red Hat Enterprise Linux for Power, big endian 5

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
ppc
axis-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: 1a6732f1bf5b6fef1aa41c9b57b7bc6904f5e2581a28f7ba82965952ed7b015f
axis-debuginfo-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: 11260b79b9c96d5cb2f4b8394772d23fb07773d20e3a6593fb6a436a143b4c19
axis-javadoc-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: da6e15868eb221edd92214da06c57100bf55e9a8eea7f0f9169c3c772817c34b
axis-manual-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: c8168d2697ab9bf60e6a57c23b9b6cf43db5d59162509deed6bef5619ea9efef

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.9

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
ppc
axis-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: 1a6732f1bf5b6fef1aa41c9b57b7bc6904f5e2581a28f7ba82965952ed7b015f
axis-debuginfo-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: 11260b79b9c96d5cb2f4b8394772d23fb07773d20e3a6593fb6a436a143b4c19
axis-javadoc-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: da6e15868eb221edd92214da06c57100bf55e9a8eea7f0f9169c3c772817c34b
axis-manual-1.2.1-2jpp.7.el5_9.ppc.rpm SHA-256: c8168d2697ab9bf60e6a57c23b9b6cf43db5d59162509deed6bef5619ea9efef

Red Hat Enterprise Linux Server from RHUI 5

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
x86_64
axis-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e436edbabaff041bd7154d710c36d7471f91c5a1834394768a835137f8691208
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
axis-javadoc-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 54f8cc33988accf7a78d8a404fbe8c87139cb5f29147916db4de4bfd06fd134e
axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 58abd320ab6c86ced1ecb591c649481bb0ca56150514535f396f9068f3c6d3b2
i386
axis-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: ba766f39c238ef4b36fe64296ecb1ac2a30b145b1d4af8ea2a79f9fe026a3f31
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b
axis-javadoc-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 26287d4463b900d2717ace8a0f2807b59a3bb0feeb37de79ce8a5bfc8074566b
axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 034e7cdd936b08474a29d4f3d86afbeb5fa28fa2f24780663d9d764f64d682bd

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.9

SRPM
axis-1.2.1-2jpp.7.el5_9.src.rpm SHA-256: 6278d6fbb72f9bbb32a1fb2f8d7891160c0c102734c65a1416c0f1031380be50
x86_64
axis-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e436edbabaff041bd7154d710c36d7471f91c5a1834394768a835137f8691208
axis-debuginfo-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: e662ec997d857800eb4d542fdef11ede14acf506d3a66e6ca4c9bc45d6f626e3
axis-javadoc-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 54f8cc33988accf7a78d8a404fbe8c87139cb5f29147916db4de4bfd06fd134e
axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm SHA-256: 58abd320ab6c86ced1ecb591c649481bb0ca56150514535f396f9068f3c6d3b2
i386
axis-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: ba766f39c238ef4b36fe64296ecb1ac2a30b145b1d4af8ea2a79f9fe026a3f31
axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: f94f323726f5178df3da1cefe1946616d8039352eea854f0e9fcb7c44577b50b
axis-javadoc-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 26287d4463b900d2717ace8a0f2807b59a3bb0feeb37de79ce8a5bfc8074566b
axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm SHA-256: 034e7cdd936b08474a29d4f3d86afbeb5fa28fa2f24780663d9d764f64d682bd

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.