gpp_maybe
Security update for jetty-minimal
SUSE-SLE-Module-Development-Tools-15-SP4-2023-4210
This update for jetty-minimal fixes the following issues: - Updated to version 9.4.53.v20231009: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - CVE-2023-36478: Fixed an integer overflow in the HTTP/2 HPACK decoder (bsc#1216162). - CVE-2023-40167: Fixed a permissive HTTP header parsing issue that could potentially lead to HTTP smuggling attacks (bsc#1215417). - CVE-2023-36479: Fixed an incorrect command execution when sending requests with certain characters in requested filenames (bsc#1215415). - CVE-2023-41900: Fixed an issue where an invalidated session would be allowed to perform a single request (bsc#1215416).
-
Release DateOct 26 2023
-
ReferencesBugzilla: 1215415, 1215417, 1215416, 1216169, 1216162
CVEs: CVE-2023-36479, CVE-2023-40167, CVE-2023-41900, CVE-2023-44487, CVE-2023-36478 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Development Tools Module 15.4 aarch64
-
Packagesjetty-http
The http module for Jettyjetty-io9.4.53-150200.3.22.1 lock rpm
The io module for Jettyjetty-minimal9.4.53-150200.3.22.1 lock rpm
Java Webserver and Servlet Containerjetty-security9.4.53-150200.3.22.1 lock src
The security module for Jettyjetty-server9.4.53-150200.3.22.1 lock rpm
The server module for Jettyjetty-servlet9.4.53-150200.3.22.1 lock rpm
The servlet module for Jettyjetty-util9.4.53-150200.3.22.1 lock rpm
The util module for Jettyjetty-util-ajax9.4.53-150200.3.22.1 lock rpm
The util-ajax module for Jetty9.4.53-150200.3.22.1 lock rpm
Development Tools Module 15.4 ppc64le
-
Packagesjetty-http
The http module for Jettyjetty-io9.4.53-150200.3.22.1 lock rpm
The io module for Jettyjetty-minimal9.4.53-150200.3.22.1 lock rpm
Java Webserver and Servlet Containerjetty-security9.4.53-150200.3.22.1 lock src
The security module for Jettyjetty-server9.4.53-150200.3.22.1 lock rpm
The server module for Jettyjetty-servlet9.4.53-150200.3.22.1 lock rpm
The servlet module for Jettyjetty-util9.4.53-150200.3.22.1 lock rpm
The util module for Jettyjetty-util-ajax9.4.53-150200.3.22.1 lock rpm
The util-ajax module for Jetty9.4.53-150200.3.22.1 lock rpm
Development Tools Module 15.4 x86_64
-
Packagesjetty-http
The http module for Jettyjetty-io9.4.53-150200.3.22.1 lock rpm
The io module for Jettyjetty-minimal9.4.53-150200.3.22.1 lock rpm
Java Webserver and Servlet Containerjetty-security9.4.53-150200.3.22.1 lock src
The security module for Jettyjetty-server9.4.53-150200.3.22.1 lock rpm
The server module for Jettyjetty-servlet9.4.53-150200.3.22.1 lock rpm
The servlet module for Jettyjetty-util9.4.53-150200.3.22.1 lock rpm
The util module for Jettyjetty-util-ajax9.4.53-150200.3.22.1 lock rpm
The util-ajax module for Jetty9.4.53-150200.3.22.1 lock rpm
Development Tools Module 15.4 s390x
-
Packagesjetty-http
The http module for Jettyjetty-io9.4.53-150200.3.22.1 lock rpm
The io module for Jettyjetty-minimal9.4.53-150200.3.22.1 lock rpm
Java Webserver and Servlet Containerjetty-security9.4.53-150200.3.22.1 lock src
The security module for Jettyjetty-server9.4.53-150200.3.22.1 lock rpm
The server module for Jettyjetty-servlet9.4.53-150200.3.22.1 lock rpm
The servlet module for Jettyjetty-util9.4.53-150200.3.22.1 lock rpm
The util module for Jettyjetty-util-ajax9.4.53-150200.3.22.1 lock rpm
The util-ajax module for Jetty9.4.53-150200.3.22.1 lock rpm