FEDORA-2021-444e38face — security update for jetty

stable

jetty-9.4.40-1.fc32

FEDORA-2021-444e38face created by akurtakov 3 years ago for Fedora 32

Update to Jetty 9.4.40 (fixes multiple CVEs)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-444e38face

This update has been submitted for testing by akurtakov.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

Builds

jetty-9.4.40-1.fc32

BZ#1945710 CVE-2021-28163 jetty: Symlink directory exposes webapp directory contents

BZ#1945711 CVE-2021-28163 jetty: Symlink directory exposes webapp directory contents [fedora-all]

BZ#1945713 CVE-2021-28164 jetty: Ambiguous paths can access WEB-INF [fedora-all]

BZ#1945715 CVE-2021-28165 jetty: Resource exhaustion when receiving an invalid large TLS frame [fedora-all]

jetty-9.4.40-1.fc32

Automated Test Results

ignored