FEDORA-2021-fd66b2bd53 — security update for jetty

stable

jetty-9.4.40-1.fc34

FEDORA-2021-fd66b2bd53 created by akurtakov 4 years ago for Fedora 34

Update to Jetty 9.4.40 (fixes multiple CVEs)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-fd66b2bd53

This update has been submitted for testing by akurtakov.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

3 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

Builds

jetty-9.4.40-1.fc34

BZ#1945710 CVE-2021-28163 jetty: Symlink directory exposes webapp directory contents

BZ#1945711 CVE-2021-28163 jetty: Symlink directory exposes webapp directory contents [fedora-all]

BZ#1945713 CVE-2021-28164 jetty: Ambiguous paths can access WEB-INF [fedora-all]

BZ#1945715 CVE-2021-28165 jetty: Resource exhaustion when receiving an invalid large TLS frame [fedora-all]

jetty-9.4.40-1.fc34

Automated Test Results

ignored