Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-28165 (GCVE-0-2021-28165)
Vulnerability from cvelistv5 – Published: 2021-04-01 14:20 – Updated: 2025-08-27 20:37
VLAI
EPSS
Summary
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Severity
7.5 (High)
Assigner
References
107 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| The Eclipse Foundation | Eclipse Jetty |
Affected:
7.2.2 , < unspecified
(custom)
Affected: unspecified , ≤ 9.4.38 (custom) Affected: 10.0.0.alpha0 , < unspecified (custom) Affected: unspecified , ≤ 10.0.1 (custom) Affected: 11.0.0.alpha0 , < unspecified (custom) Affected: unspecified , ≤ 11.0.1 (custom) |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.085Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[oss-security] 20210420 Vulnerability in Jenkins",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20210611-0006/"
},
{
"name": "DSA-4949",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"name": "[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2021-28165",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-27T20:37:21.074048Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-755",
"description": "CWE-755 Improper Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-27T20:37:23.768Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Eclipse Jetty",
"vendor": "The Eclipse Foundation",
"versions": [
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.2.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "9.4.38",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "10.0.0.alpha0",
"versionType": "custom"
},
{
"lessThanOrEqual": "10.0.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "11.0.0.alpha0",
"versionType": "custom"
},
{
"lessThanOrEqual": "11.0.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-551",
"description": "CWE-551",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-19T23:54:20.000Z",
"orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
"shortName": "eclipse"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E"
},
{
"name": "[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[oss-security] 20210420 Vulnerability in Jenkins",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E"
},
{
"name": "[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E"
},
{
"name": "[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E"
},
{
"name": "[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20210611-0006/"
},
{
"name": "DSA-4949",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"name": "[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@eclipse.org",
"ID": "CVE-2021-28165",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Eclipse Jetty",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_value": "7.2.2"
},
{
"version_affected": "\u003c=",
"version_value": "9.4.38"
},
{
"version_affected": "\u003e=",
"version_value": "10.0.0.alpha0"
},
{
"version_affected": "\u003c=",
"version_value": "10.0.1"
},
{
"version_affected": "\u003e=",
"version_value": "11.0.0.alpha0"
},
{
"version_affected": "\u003c=",
"version_value": "11.0.1"
}
]
}
}
]
},
"vendor_name": "The Eclipse Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame."
}
]
},
"impact": {
"cvss": {
"baseScore": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-400"
}
]
},
{
"description": [
{
"lang": "eng",
"value": "CWE-551"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
"refsource": "CONFIRM",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e@%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959@%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b@%3Cdev.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78@%3Ccommits.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97@%3Ccommits.spark.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1@%3Ccommits.hbase.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7@%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e@%3Cdev.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7@%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961@%3Cissues.solr.apache.org%3E"
},
{
"name": "[oss-security] 20210420 Vulnerability in Jenkins",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66@%3Cissues.solr.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7@%3Creviews.spark.apache.org%3E"
},
{
"name": "[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81@%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6@%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f@%3Cissues.solr.apache.org%3E"
},
{
"name": "[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a@%3Cjira.kafka.apache.org%3E"
},
{
"name": "https://www.oracle.com//security-alerts/cpujul2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20210611-0006/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20210611-0006/"
},
{
"name": "DSA-4949",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"name": "[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c@%3Cissues.solr.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
"assignerShortName": "eclipse",
"cveId": "CVE-2021-28165",
"datePublished": "2021-04-01T14:20:14.000Z",
"dateReserved": "2021-03-12T00:00:00.000Z",
"dateUpdated": "2025-08-27T20:37:23.768Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2021-28165",
"date": "2026-05-30",
"epss": "0.13581",
"percentile": "0.94352"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-28165\",\"sourceIdentifier\":\"emo@eclipse.org\",\"published\":\"2021-04-01T15:15:14.237\",\"lastModified\":\"2025-08-27T21:15:37.060\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.\"},{\"lang\":\"es\",\"value\":\"En Eclipse Jetty versiones 7.2.2 hasta 9.4.38, versiones 10.0.0.alpha0 hasta 10.0.1 y versiones 11.0.0.alpha0 hasta 11.0.1, el uso de CPU puede alcanzar el 100% al recibir una gran trama TLS no v\u00e1lida.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"emo@eclipse.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"emo@eclipse.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"},{\"lang\":\"en\",\"value\":\"CWE-551\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-755\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-755\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.2\",\"versionEndExcluding\":\"9.4.39\",\"matchCriteriaId\":\"A69D5FF1-A151-4AF6-B5E6-35EB45DC1852\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.0.2\",\"matchCriteriaId\":\"3008A0E3-FBFC-49AA-8867-16BD10B125DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0.0\",\"versionEndExcluding\":\"11.0.2\",\"matchCriteriaId\":\"1B8688FE-13CC-4598-913D-50EB38DDCBEC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97994257-C9A4-4491-B362-E8B25B7187AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4479F76A-4B67-41CC-98C7-C76B81050F8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19EEAA04-A7BD-4FFF-8B0B-CEE5EC09F75C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"062E4E7C-55BB-46F3-8B61-5A663B565891\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0.0\",\"versionEndIncluding\":\"8.2.4.0\",\"matchCriteriaId\":\"F80CB000-C477-486C-838C-B2FE82647670\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0.0\",\"versionEndIncluding\":\"8.2.4.0\",\"matchCriteriaId\":\"349C4D65-23E9-446A-8A36-94FF55686812\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:rest_data_services:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"21.3\",\"matchCriteriaId\":\"B5E43770-8F83-4077-9EB0-3BF4A19A2E75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"21.9\",\"matchCriteriaId\":\"BEAB4771-C33C-4151-AEAE-A6D2C892C3C8\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*\",\"versionEndExcluding\":\"2.277.3\",\"matchCriteriaId\":\"8E071B1A-A339-4622-9150-59F62B151353\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.286\",\"matchCriteriaId\":\"EB777690-DCA0-4E68-B30E-E997A1281D4E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.9.8\",\"matchCriteriaId\":\"C30E9A12-5B7B-42F6-B9D3-18DA133E5F4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_performance_analyzer:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.0\",\"matchCriteriaId\":\"CC05F69D-6C6B-472D-87B7-84231F14CA8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0.0\",\"versionEndExcluding\":\"11.70.1\",\"matchCriteriaId\":\"D179365A-1E70-4B07-B882-FD082FE2AA58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_storage:*:*:*:*:*:vcenter:*:*\",\"versionEndExcluding\":\"1.10\",\"matchCriteriaId\":\"3930F108-9019-4B4A-8918-6CE9F58551D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*\",\"versionEndExcluding\":\"5.1\",\"matchCriteriaId\":\"FCB4EAC3-3114-43DF-89DA-879C7C578FB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:ontap_tools:*:*:*:*:*:vmware_vsphere:*:*\",\"versionEndExcluding\":\"9.10\",\"matchCriteriaId\":\"E28AE83F-D666-4EDC-A276-F78F3A73D716\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB15BCF1-1B1D-49D8-9B76-46DCB10044DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:santricity_web_services_proxy:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1\",\"matchCriteriaId\":\"A21FA571-8C10-4633-802D-6C20A8290145\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.6\",\"matchCriteriaId\":\"04A544A2-C80D-488B-AC04-104F9FB3FA85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*\",\"versionEndExcluding\":\"9.10\",\"matchCriteriaId\":\"20E0A1CE-7467-4EAC-877D-D6D473AE0AA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.10\",\"matchCriteriaId\":\"8BC51CBC-4973-4145-945C-56035034D772\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2021/04/20/3\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E\",\"source\":\"emo@eclipse.org\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20210611-0006/\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4949\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"emo@eclipse.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/04/20/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20210611-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4949\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E\", \"name\": \"[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E\", \"name\": \"[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E\", \"name\": \"[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E\", \"name\": \"[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E\", \"name\": \"[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E\", \"name\": \"[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E\", \"name\": \"[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/04/20/3\", \"name\": \"[oss-security] 20210420 Vulnerability in Jenkins\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210611-0006/\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4949\", \"name\": \"DSA-4949\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T21:40:12.085Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-28165\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-08-27T20:37:21.074048Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-755\", \"description\": \"CWE-755 Improper Handling of Exceptional Conditions\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-27T20:36:59.192Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"The Eclipse Foundation\", \"product\": \"Eclipse Jetty\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2.2\", \"lessThan\": \"unspecified\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.4.38\"}, {\"status\": \"affected\", \"version\": \"10.0.0.alpha0\", \"lessThan\": \"unspecified\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"10.0.1\"}, {\"status\": \"affected\", \"version\": \"11.0.0.alpha0\", \"lessThan\": \"unspecified\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"11.0.1\"}]}], \"references\": [{\"url\": \"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E\", \"name\": \"[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E\", \"name\": \"[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E\", \"name\": \"[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E\", \"name\": \"[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E\", \"name\": \"[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E\", \"name\": \"[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E\", \"name\": \"[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/04/20/3\", \"name\": \"[oss-security] 20210420 Vulnerability in Jenkins\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210611-0006/\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4949\", \"name\": \"DSA-4949\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"]}, {\"url\": \"https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-400\", \"description\": \"CWE-400\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-551\", \"description\": \"CWE-551\"}]}], \"providerMetadata\": {\"orgId\": \"e51fbebd-6053-4e49-959f-1b94eeb69a2c\", \"shortName\": \"eclipse\", \"dateUpdated\": \"2022-04-19T23:54:20.000Z\"}, \"x_legacyV4Record\": {\"impact\": {\"cvss\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\"}}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"7.2.2\", \"version_affected\": \"\u003e=\"}, {\"version_value\": \"9.4.38\", \"version_affected\": \"\u003c=\"}, {\"version_value\": \"10.0.0.alpha0\", \"version_affected\": \"\u003e=\"}, {\"version_value\": \"10.0.1\", \"version_affected\": \"\u003c=\"}, {\"version_value\": \"11.0.0.alpha0\", \"version_affected\": \"\u003e=\"}, {\"version_value\": \"11.0.1\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"Eclipse Jetty\"}]}, \"vendor_name\": \"The Eclipse Foundation\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w\", \"name\": \"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287@%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94@%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b@%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486@%3Cissues.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e@%3Cdev.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959@%3Cdev.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f@%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36@%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc@%3Cnotifications.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2@%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77@%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb@%3Ccommits.zookeeper.apache.org%3E\", \"name\": \"[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b@%3Cdev.hbase.apache.org%3E\", \"name\": \"[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449@%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa@%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f@%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4@%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a@%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81@%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da@%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913@%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424@%3Cissues.spark.apache.org%3E\", \"name\": \"[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78@%3Ccommits.spark.apache.org%3E\", \"name\": \"[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97@%3Ccommits.spark.apache.org%3E\", \"name\": \"[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d@%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225@%3Cissues.hbase.apache.org%3E\", \"name\": \"[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1@%3Ccommits.hbase.apache.org%3E\", \"name\": \"[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155@%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed@%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7@%3Cdev.kafka.apache.org%3E\", \"name\": \"[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f@%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc@%3Ccommits.pulsar.apache.org%3E\", \"name\": \"[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b@%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e@%3Cdev.ignite.apache.org%3E\", \"name\": \"[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7@%3Cdev.kafka.apache.org%3E\", \"name\": \"[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961@%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"refsource\": \"MLIST\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/04/20/3\", \"name\": \"[oss-security] 20210420 Vulnerability in Jenkins\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd@%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f@%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46@%3Cissues.ignite.apache.org%3E\", \"name\": \"[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66@%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7@%3Creviews.spark.apache.org%3E\", \"name\": \"[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81@%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6@%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f@%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a@%3Cjira.kafka.apache.org%3E\", \"name\": \"[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39\", \"refsource\": \"MLIST\"}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"name\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210611-0006/\", \"name\": \"https://security.netapp.com/advisory/ntap-20210611-0006/\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://www.debian.org/security/2021/dsa-4949\", \"name\": \"DSA-4949\", \"refsource\": \"DEBIAN\"}, {\"url\": \"https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c@%3Cissues.solr.apache.org%3E\", \"name\": \"[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr\", \"refsource\": \"MLIST\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"name\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"name\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"name\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"CWE-400\"}]}, {\"description\": [{\"lang\": \"eng\", \"value\": \"CWE-551\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2021-28165\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"security@eclipse.org\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2021-28165\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-08-27T20:37:23.768Z\", \"dateReserved\": \"2021-03-12T00:00:00.000Z\", \"assignerOrgId\": \"e51fbebd-6053-4e49-959f-1b94eeb69a2c\", \"datePublished\": \"2021-04-01T14:20:14.000Z\", \"assignerShortName\": \"eclipse\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
FKIE_CVE-2021-28165
Vulnerability from fkie_nvd - Published: 2021-04-01 15:15 - Updated: 2025-08-27 21:15
Severity
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A69D5FF1-A151-4AF6-B5E6-35EB45DC1852",
"versionEndExcluding": "9.4.39",
"versionStartIncluding": "7.2.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3008A0E3-FBFC-49AA-8867-16BD10B125DB",
"versionEndExcluding": "10.0.2",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1B8688FE-13CC-4598-913D-50EB38DDCBEC",
"versionEndExcluding": "11.0.2",
"versionStartIncluding": "11.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "97994257-C9A4-4491-B362-E8B25B7187AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4479F76A-4B67-41CC-98C7-C76B81050F8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "19EEAA04-A7BD-4FFF-8B0B-CEE5EC09F75C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "062E4E7C-55BB-46F3-8B61-5A663B565891",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F80CB000-C477-486C-838C-B2FE82647670",
"versionEndIncluding": "8.2.4.0",
"versionStartIncluding": "8.0.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "349C4D65-23E9-446A-8A36-94FF55686812",
"versionEndIncluding": "8.2.4.0",
"versionStartIncluding": "8.0.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:rest_data_services:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B5E43770-8F83-4077-9EB0-3BF4A19A2E75",
"versionEndExcluding": "21.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BEAB4771-C33C-4151-AEAE-A6D2C892C3C8",
"versionEndIncluding": "21.9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
"matchCriteriaId": "8E071B1A-A339-4622-9150-59F62B151353",
"versionEndExcluding": "2.277.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EB777690-DCA0-4E68-B30E-E997A1281D4E",
"versionEndExcluding": "2.286",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C30E9A12-5B7B-42F6-B9D3-18DA133E5F4E",
"versionEndExcluding": "3.9.8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:e-series_performance_analyzer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CC05F69D-6C6B-472D-87B7-84231F14CA8B",
"versionEndExcluding": "3.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D179365A-1E70-4B07-B882-FD082FE2AA58",
"versionEndExcluding": "11.70.1",
"versionStartIncluding": "11.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:e-series_santricity_storage:*:*:*:*:*:vcenter:*:*",
"matchCriteriaId": "3930F108-9019-4B4A-8918-6CE9F58551D2",
"versionEndExcluding": "1.10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*",
"matchCriteriaId": "FCB4EAC3-3114-43DF-89DA-879C7C578FB4",
"versionEndExcluding": "5.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:ontap_tools:*:*:*:*:*:vmware_vsphere:*:*",
"matchCriteriaId": "E28AE83F-D666-4EDC-A276-F78F3A73D716",
"versionEndExcluding": "9.10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:santricity_web_services_proxy:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A21FA571-8C10-4633-802D-6C20A8290145",
"versionEndExcluding": "5.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*",
"matchCriteriaId": "04A544A2-C80D-488B-AC04-104F9FB3FA85",
"versionEndExcluding": "4.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
"matchCriteriaId": "20E0A1CE-7467-4EAC-877D-D6D473AE0AA2",
"versionEndExcluding": "9.10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8BC51CBC-4973-4145-945C-56035034D772",
"versionEndExcluding": "9.10",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame."
},
{
"lang": "es",
"value": "En Eclipse Jetty versiones 7.2.2 hasta 9.4.38, versiones 10.0.0.alpha0 hasta 10.0.1 y versiones 11.0.0.alpha0 hasta 11.0.1, el uso de CPU puede alcanzar el 100% al recibir una gran trama TLS no v\u00e1lida."
}
],
"id": "CVE-2021-28165",
"lastModified": "2025-08-27T21:15:37.060",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "emo@eclipse.org",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2021-04-01T15:15:14.237",
"references": [
{
"source": "emo@eclipse.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
},
{
"source": "emo@eclipse.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E"
},
{
"source": "emo@eclipse.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20210611-0006/"
},
{
"source": "emo@eclipse.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"source": "emo@eclipse.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"source": "emo@eclipse.org",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"source": "emo@eclipse.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"source": "emo@eclipse.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20210611-0006/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
],
"sourceIdentifier": "emo@eclipse.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-400"
},
{
"lang": "en",
"value": "CWE-551"
}
],
"source": "emo@eclipse.org",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-755"
}
],
"source": "nvd@nist.gov",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-755"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-26VR-8J45-3R4W
Vulnerability from github – Published: 2021-04-06 17:31 – Updated: 2022-08-10 23:33
VLAI
Summary
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Details
Impact
When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing CPU resources to eventually reach 100% usage.
Workarounds
The problem can be worked around by compiling the following class:
package org.eclipse.jetty.server.ssl.fix6072;
import java.nio.ByteBuffer;
import javax.net.ssl.SSLEngine;
import javax.net.ssl.SSLEngineResult;
import javax.net.ssl.SSLException;
import javax.net.ssl.SSLHandshakeException;
import org.eclipse.jetty.io.EndPoint;
import org.eclipse.jetty.io.ssl.SslConnection;
import org.eclipse.jetty.server.Connector;
import org.eclipse.jetty.server.SslConnectionFactory;
import org.eclipse.jetty.util.BufferUtil;
import org.eclipse.jetty.util.annotation.Name;
import org.eclipse.jetty.util.ssl.SslContextFactory;
public class SpaceCheckingSslConnectionFactory extends SslConnectionFactory
{
public SpaceCheckingSslConnectionFactory(@Name("sslContextFactory") SslContextFactory factory, @Name("next") String nextProtocol)
{
super(factory, nextProtocol);
}
@Override
protected SslConnection newSslConnection(Connector connector, EndPoint endPoint, SSLEngine engine)
{
return new SslConnection(connector.getByteBufferPool(), connector.getExecutor(), endPoint, engine, isDirectBuffersForEncryption(), isDirectBuffersForDecryption())
{
@Override
protected SSLEngineResult unwrap(SSLEngine sslEngine, ByteBuffer input, ByteBuffer output) throws SSLException
{
SSLEngineResult results = super.unwrap(sslEngine, input, output);
if ((results.getStatus() == SSLEngineResult.Status.BUFFER_UNDERFLOW ||
results.getStatus() == SSLEngineResult.Status.OK && results.bytesConsumed() == 0 && results.bytesProduced() == 0) &&
BufferUtil.space(input) == 0)
{
BufferUtil.clear(input);
throw new SSLHandshakeException("Encrypted buffer max length exceeded");
}
return results;
}
};
}
}
This class can be deployed by:
+ The resulting class file should be put into a jar file (eg sslfix6072.jar)
+ The jar file should be made available to the server. For a normal distribution this can be done by putting the file into ${jetty.base}/lib
+ Copy the file ${jetty.home}/modules/ssl.mod to ${jetty.base}/modules
+ Edit the ${jetty.base}/modules/ssl.mod file to have the following section:
[lib]
lib/sslfix6072.jar
- Copy the file
${jetty.home}/etc/jetty-https.xmland${jetty.home}/etc/jetty-http2.xmlto${jetty.base}/etc - Edit files
${jetty.base}/etc/jetty-https.xmland${jetty.base}/etc/jetty-http2.xml, changing any reference oforg.eclipse.jetty.server.SslConnectionFactorytoorg.eclipse.jetty.server.ssl.fix6072.SpaceCheckingSslConnectionFactory. For example:
<Call name="addIfAbsentConnectionFactory">
<Arg>
<New class="org.eclipse.jetty.server.ssl.fix6072.SpaceCheckingSslConnectionFactory">
<Arg name="next">http/1.1</Arg>
<Arg name="sslContextFactory"><Ref refid="sslContextFactory"/></Arg>
</New>
</Arg>
</Call>
- Restart Jetty
Severity
7.5 (High)
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty:jetty-server"
},
"ranges": [
{
"events": [
{
"introduced": "7.2.2"
},
{
"fixed": "9.4.39"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty:jetty-server"
},
"ranges": [
{
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty:jetty-server"
},
"ranges": [
{
"events": [
{
"introduced": "11.0.0"
},
{
"fixed": "11.0.2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2021-28165"
],
"database_specific": {
"cwe_ids": [
"CWE-400",
"CWE-551",
"CWE-755"
],
"github_reviewed": true,
"github_reviewed_at": "2021-04-02T23:02:13Z",
"nvd_published_at": "2021-04-01T15:15:00Z",
"severity": "HIGH"
},
"details": "### Impact\nWhen using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing CPU resources to eventually reach 100% usage.\n\n### Workarounds\n\nThe problem can be worked around by compiling the following class:\n```java\npackage org.eclipse.jetty.server.ssl.fix6072;\n\nimport java.nio.ByteBuffer;\nimport javax.net.ssl.SSLEngine;\nimport javax.net.ssl.SSLEngineResult;\nimport javax.net.ssl.SSLException;\nimport javax.net.ssl.SSLHandshakeException;\n\nimport org.eclipse.jetty.io.EndPoint;\nimport org.eclipse.jetty.io.ssl.SslConnection;\nimport org.eclipse.jetty.server.Connector;\nimport org.eclipse.jetty.server.SslConnectionFactory;\nimport org.eclipse.jetty.util.BufferUtil;\nimport org.eclipse.jetty.util.annotation.Name;\nimport org.eclipse.jetty.util.ssl.SslContextFactory;\n\npublic class SpaceCheckingSslConnectionFactory extends SslConnectionFactory\n{\n public SpaceCheckingSslConnectionFactory(@Name(\"sslContextFactory\") SslContextFactory factory, @Name(\"next\") String nextProtocol)\n {\n super(factory, nextProtocol);\n }\n\n @Override\n protected SslConnection newSslConnection(Connector connector, EndPoint endPoint, SSLEngine engine)\n {\n return new SslConnection(connector.getByteBufferPool(), connector.getExecutor(), endPoint, engine, isDirectBuffersForEncryption(), isDirectBuffersForDecryption())\n {\n @Override\n protected SSLEngineResult unwrap(SSLEngine sslEngine, ByteBuffer input, ByteBuffer output) throws SSLException\n {\n SSLEngineResult results = super.unwrap(sslEngine, input, output);\n\n if ((results.getStatus() == SSLEngineResult.Status.BUFFER_UNDERFLOW ||\n results.getStatus() == SSLEngineResult.Status.OK \u0026\u0026 results.bytesConsumed() == 0 \u0026\u0026 results.bytesProduced() == 0) \u0026\u0026\n BufferUtil.space(input) == 0)\n {\n BufferUtil.clear(input);\n throw new SSLHandshakeException(\"Encrypted buffer max length exceeded\");\n }\n return results;\n }\n };\n }\n}\n```\nThis class can be deployed by:\n + The resulting class file should be put into a jar file (eg sslfix6072.jar)\n + The jar file should be made available to the server. For a normal distribution this can be done by putting the file into ${jetty.base}/lib\n + Copy the file `${jetty.home}/modules/ssl.mod` to `${jetty.base}/modules`\n + Edit the `${jetty.base}/modules/ssl.mod` file to have the following section:\n\n```\n[lib]\nlib/sslfix6072.jar\n```\n\n+ Copy the file `${jetty.home}/etc/jetty-https.xml` and`${jetty.home}/etc/jetty-http2.xml` to `${jetty.base}/etc`\n+ Edit files `${jetty.base}/etc/jetty-https.xml` and `${jetty.base}/etc/jetty-http2.xml`, changing any reference of `org.eclipse.jetty.server.SslConnectionFactory` to `org.eclipse.jetty.server.ssl.fix6072.SpaceCheckingSslConnectionFactory`. For example:\n```xml\n \u003cCall name=\"addIfAbsentConnectionFactory\"\u003e\n \u003cArg\u003e\n \u003cNew class=\"org.eclipse.jetty.server.ssl.fix6072.SpaceCheckingSslConnectionFactory\"\u003e\n \u003cArg name=\"next\"\u003ehttp/1.1\u003c/Arg\u003e\n \u003cArg name=\"sslContextFactory\"\u003e\u003cRef refid=\"sslContextFactory\"/\u003e\u003c/Arg\u003e\n \u003c/New\u003e\n \u003c/Arg\u003e\n \u003c/Call\u003e\n```\n+ Restart Jetty",
"id": "GHSA-26vr-8j45-3r4w",
"modified": "2022-08-10T23:33:55Z",
"published": "2021-04-06T17:31:30Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77@%3Ccommits.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486@%3Cissues.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f@%3Cissues.solr.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f@%3Cissues.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449@%3Cissues.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424@%3Cissues.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6@%3Cissues.solr.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b@%3Cdev.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20210611-0006"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed@%3Ccommits.pulsar.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e@%3Cdev.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b@%3Cissues.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1@%3Ccommits.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f@%3Ccommits.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa@%3Cissues.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e@%3Cdev.ignite.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97@%3Ccommits.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c@%3Cissues.solr.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f@%3Ccommits.pulsar.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f@%3Cissues.ignite.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225@%3Cissues.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb@%3Ccommits.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81@%3Cissues.solr.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78@%3Ccommits.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287@%3Cissues.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66@%3Cissues.solr.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4@%3Cissues.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2@%3Ccommits.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961@%3Cissues.solr.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a@%3Cissues.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"type": "PACKAGE",
"url": "https://github.com/eclipse/jetty.project"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913@%3Cissues.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc@%3Ccommits.pulsar.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81@%3Cissues.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da@%3Cissues.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36@%3Ccommits.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d@%3Cissues.hbase.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd@%3Cissues.ignite.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7@%3Cdev.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812@%3Cjira.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7@%3Cdev.kafka.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94@%3Cissues.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da@%3Creviews.spark.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b@%3Cissues.ignite.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959@%3Cdev.zookeeper.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155@%3Ccommits.pulsar.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46@%3Cissues.ignite.apache.org%3E"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources"
}
GSD-2021-28165
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2021-28165",
"description": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",
"id": "GSD-2021-28165",
"references": [
"https://www.suse.com/security/cve/CVE-2021-28165.html",
"https://www.debian.org/security/2021/dsa-4949",
"https://access.redhat.com/errata/RHSA-2021:4767",
"https://access.redhat.com/errata/RHSA-2021:3700",
"https://access.redhat.com/errata/RHSA-2021:3225",
"https://access.redhat.com/errata/RHSA-2021:3140",
"https://access.redhat.com/errata/RHSA-2021:2689",
"https://access.redhat.com/errata/RHSA-2021:1560",
"https://access.redhat.com/errata/RHSA-2021:1551",
"https://access.redhat.com/errata/RHSA-2021:1509",
"https://security.archlinux.org/CVE-2021-28165",
"https://access.redhat.com/errata/RHSA-2022:6407"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2021-28165"
],
"details": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",
"id": "GSD-2021-28165",
"modified": "2023-12-13T01:23:29.152537Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security@eclipse.org",
"ID": "CVE-2021-28165",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Eclipse Jetty",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_value": "7.2.2"
},
{
"version_affected": "\u003c=",
"version_value": "9.4.38"
},
{
"version_affected": "\u003e=",
"version_value": "10.0.0.alpha0"
},
{
"version_affected": "\u003c=",
"version_value": "10.0.1"
},
{
"version_affected": "\u003e=",
"version_value": "11.0.0.alpha0"
},
{
"version_affected": "\u003c=",
"version_value": "11.0.1"
}
]
}
}
]
},
"vendor_name": "The Eclipse Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame."
}
]
},
"impact": {
"cvss": {
"baseScore": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-400"
}
]
},
{
"description": [
{
"lang": "eng",
"value": "CWE-551"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
"refsource": "CONFIRM",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e@%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959@%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b@%3Cdev.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78@%3Ccommits.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97@%3Ccommits.spark.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1@%3Ccommits.hbase.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7@%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e@%3Cdev.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7@%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961@%3Cissues.solr.apache.org%3E"
},
{
"name": "[oss-security] 20210420 Vulnerability in Jenkins",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66@%3Cissues.solr.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7@%3Creviews.spark.apache.org%3E"
},
{
"name": "[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81@%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6@%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f@%3Cissues.solr.apache.org%3E"
},
{
"name": "[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a@%3Cjira.kafka.apache.org%3E"
},
{
"name": "https://www.oracle.com//security-alerts/cpujul2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20210611-0006/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20210611-0006/"
},
{
"name": "DSA-4949",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"name": "[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c@%3Cissues.solr.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "[7.2.2,9.4.39),[10.0.0,10.0.2),[11.0.0,11.0.2)",
"affected_versions": "All versions starting from 7.2.2 before 9.4.39, all versions starting from 10.0.0 before 10.0.2, all versions starting from 11.0.0 before 11.0.2",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-755",
"CWE-937"
],
"date": "2022-07-29",
"description": "In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large invalid TLS frame.",
"fixed_versions": [
"9.4.39.v20210325",
"10.0.2",
"11.0.2"
],
"identifier": "CVE-2021-28165",
"identifiers": [
"CVE-2021-28165",
"GHSA-26vr-8j45-3r4w"
],
"not_impacted": "All versions before 7.2.2, all versions starting from 9.4.39 before 10.0.0, all versions starting from 10.0.2 before 11.0.0, all versions starting from 11.0.2",
"package_slug": "maven/org.eclipse.jetty/jetty-client",
"pubdate": "2021-04-01",
"solution": "Upgrade to versions 9.4.39.v20210325, 10.0.2, 11.0.2 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
],
"uuid": "dacbc243-ad34-431b-a76e-6aadbd88fa41"
},
{
"affected_range": "[7.2.2,9.4.39),[10.0.0,10.0.2),[11.0.0,11.0.2)",
"affected_versions": "All versions starting from 7.2.2 before 9.4.39, all versions starting from 10.0.0 before 10.0.2, all versions starting from 11.0.0 before 11.0.2",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-755",
"CWE-937"
],
"date": "2022-07-29",
"description": "In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large invalid TLS frame.",
"fixed_versions": [
"9.4.39.v20210325",
"10.0.2",
"11.0.2"
],
"identifier": "CVE-2021-28165",
"identifiers": [
"CVE-2021-28165",
"GHSA-26vr-8j45-3r4w"
],
"not_impacted": "All versions before 7.2.2, all versions starting from 9.4.39 before 10.0.0, all versions starting from 10.0.2 before 11.0.0, all versions starting from 11.0.2",
"package_slug": "maven/org.eclipse.jetty/jetty-http",
"pubdate": "2021-04-01",
"solution": "Upgrade to versions 9.4.39.v20210325, 10.0.2, 11.0.2 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
],
"uuid": "63158b6f-428f-46e5-b731-3842901ed871"
},
{
"affected_range": "[7.2.2,9.4.39),[10.0.0,10.0.2),[11.0.0,11.0.2)",
"affected_versions": "All versions starting from 7.2.2 before 9.4.39, all versions starting from 10.0.0 before 10.0.2, all versions starting from 11.0.0 before 11.0.2",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-755",
"CWE-937"
],
"date": "2022-07-29",
"description": "In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large invalid TLS frame.",
"fixed_versions": [
"9.4.39.v20210325",
"10.0.2",
"11.0.2"
],
"identifier": "CVE-2021-28165",
"identifiers": [
"CVE-2021-28165",
"GHSA-26vr-8j45-3r4w"
],
"not_impacted": "All versions before 7.2.2, all versions starting from 9.4.39 before 10.0.0, all versions starting from 10.0.2 before 11.0.0, all versions starting from 11.0.2",
"package_slug": "maven/org.eclipse.jetty/jetty-io",
"pubdate": "2021-04-01",
"solution": "Upgrade to versions 9.4.39.v20210325, 10.0.2, 11.0.2 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
],
"uuid": "11ac6218-84c4-4e05-9699-b28b71c7aa11"
},
{
"affected_range": "[7.2.2,9.4.39),[10.0.0,10.0.2),[11.0.0,11.0.2)",
"affected_versions": "All versions starting from 7.2.2 before 9.4.39, all versions starting from 10.0.0 before 10.0.2, all versions starting from 11.0.0 before 11.0.2",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-755",
"CWE-937"
],
"date": "2022-07-29",
"description": "In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large invalid TLS frame.",
"fixed_versions": [
"9.4.39.v20210325",
"10.0.2",
"11.0.2"
],
"identifier": "CVE-2021-28165",
"identifiers": [
"CVE-2021-28165",
"GHSA-26vr-8j45-3r4w"
],
"not_impacted": "All versions before 7.2.2, all versions starting from 9.4.39 before 10.0.0, all versions starting from 10.0.2 before 11.0.0, all versions starting from 11.0.2",
"package_slug": "maven/org.eclipse.jetty/jetty-server",
"pubdate": "2021-04-01",
"solution": "Upgrade to versions 9.4.39.v20210325, 10.0.2, 11.0.2 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
],
"uuid": "72501e73-ef5a-41dc-90fa-cf04dd4ab63a"
},
{
"affected_range": "[7.2.2,9.4.39),[10.0.0,10.0.2),[11.0.0,11.0.2)",
"affected_versions": "All versions starting from 7.2.2 before 9.4.39, all versions starting from 10.0.0 before 10.0.2, all versions starting from 11.0.0 before 11.0.2",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-755",
"CWE-937"
],
"date": "2022-07-29",
"description": "In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large invalid TLS frame.",
"fixed_versions": [
"9.4.39.v20210325",
"10.0.2",
"11.0.2"
],
"identifier": "CVE-2021-28165",
"identifiers": [
"CVE-2021-28165",
"GHSA-26vr-8j45-3r4w"
],
"not_impacted": "All versions before 7.2.2, all versions starting from 9.4.39 before 10.0.0, all versions starting from 10.0.2 before 11.0.0, all versions starting from 11.0.2",
"package_slug": "maven/org.eclipse.jetty/jetty-util",
"pubdate": "2021-04-01",
"solution": "Upgrade to versions 9.4.39.v20210325, 10.0.2, 11.0.2 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
],
"uuid": "66bca4fa-ae7f-42a6-a605-83cd328ae3e7"
},
{
"affected_range": "[2.277.3,2.286)",
"affected_versions": "All versions after 2.277.3 before 2.286",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-755",
"CWE-937"
],
"date": "2022-07-29",
"description": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",
"fixed_versions": [
"2.286"
],
"identifier": "CVE-2021-28165",
"identifiers": [
"CVE-2021-28165",
"GHSA-26vr-8j45-3r4w"
],
"not_impacted": "",
"package_slug": "maven/org.jenkins-ci.main/jenkins-core",
"pubdate": "2021-04-01",
"solution": "Upgrade to version 2.286 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2021-28165",
"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
"http://www.openwall.com/lists/oss-security/2021/04/20/3",
"https://security.netapp.com/advisory/ntap-20210611-0006/",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.debian.org/security/2021/dsa-4949",
"https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c@%3Cissues.solr.apache.org%3E",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.oracle.com/security-alerts/cpujan2022.html"
],
"uuid": "72fb8c1e-4b01-4f67-8eb1-96555eedb9ab"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.0.2",
"versionStartIncluding": "11.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.0.2",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "9.4.39",
"versionStartIncluding": "7.2.2",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "21.9",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.2.4.0",
"versionStartIncluding": "8.0.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.2.4.0",
"versionStartIncluding": "8.0.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:rest_data_services:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "21.3",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.277.3",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.286",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.70.1",
"versionStartIncluding": "11.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:e-series_performance_analyzer:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.6",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_storage:*:*:*:*:*:vcenter:*:*",
"cpe_name": [],
"versionEndExcluding": "1.10",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:santricity_web_services_proxy:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "5.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
"cpe_name": [],
"versionEndExcluding": "9.10",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "9.10",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*",
"cpe_name": [],
"versionEndExcluding": "5.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:ontap_tools:*:*:*:*:*:vmware_vsphere:*:*",
"cpe_name": [],
"versionEndExcluding": "9.10",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.9.8",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "security@eclipse.org",
"ID": "CVE-2021-28165"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-755"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
"refsource": "CONFIRM",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 [jira] [Created] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e@%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Assigned] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.39 CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-issues] 20210407 [jira] [Updated] (ZOOKEEPER-4277) dependency-check:check failing - jetty-server-9.4.38 CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b@%3Cissues.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-dev] 20210407 Re: [VOTE] Apache ZooKeeper release 3.6.3 candidate 1",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959@%3Cdev.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar opened a new pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] nkalmar edited a comment on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.6.3 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.7 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] asfgit closed pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad commented on pull request #1675: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch master updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-notifications] 20210407 [GitHub] [zookeeper] arshadmohammad closed pull request #1676: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464@%3Cnotifications.zookeeper.apache.org%3E"
},
{
"name": "[zookeeper-commits] 20210407 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-4277: update jetty to 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2@%3Ccommits.zookeeper.apache.org%3E"
},
{
"name": "[hbase-dev] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b@%3Cdev.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] Apache-HBase commented on pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [GitHub] [hbase-thirdparty] apurtell opened a new pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Created] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210407 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Created] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Assigned] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Updated] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Commented] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] HyukjinKwon commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk closed pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] MaxGekk commented on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] sarutak opened a new pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-issues] 20210408 [jira] [Resolved] (SPARK-34988) Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424@%3Cissues.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32091: [SPARK-34988][CORE] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] AmplabJenkins removed a comment on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] SparkQA removed a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen commented on pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] srowen closed pull request #32094: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] viirya commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun edited a comment on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-2.4 updated: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97@%3Ccommits.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun commented on pull request #32093: [SPARK-34988][CORE][2.4] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-commits] 20210408 [spark] branch branch-3.0 updated: [SPARK-34988][CORE][3.0] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78@%3Ccommits.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210408 [GitHub] [spark] dongjoon-hyun closed pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add@%3Creviews.spark.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [GitHub] [hbase-thirdparty] apurtell merged pull request #49: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[hbase-commits] 20210408 [hbase-thirdparty] branch master updated: HBASE-25746 [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165 (#49)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1@%3Ccommits.hbase.apache.org%3E"
},
{
"name": "[hbase-issues] 20210408 [jira] [Updated] (HBASE-25746) [hbase-thirdparty] Update jetty to \u003e= 9.4.39 due to CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225@%3Cissues.hbase.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] dinghram opened a new pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210409 [GitHub] [pulsar] merlimat commented on pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-dev] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7@%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Created] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai commented on pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[pulsar-commits] 20210412 [GitHub] [pulsar] jiazhai closed pull request #10183: CVE-2021-28165-Jetty",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f@%3Ccommits.pulsar.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr opened a new pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [jira] [Assigned] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210412 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[ignite-issues] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-dev] 20210413 [jira] [Created] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e@%3Cdev.ignite.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 merged pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [jira] [Updated] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] edwin092 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-dev] 20210413 [jira] [Resolved] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7@%3Cdev.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] chia7712 commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[kafka-jira] 20210413 [GitHub] [kafka] dongjinleekr commented on pull request #10526: KAFKA-12655: CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1@%3Cjira.kafka.apache.org%3E"
},
{
"name": "[solr-issues] 20210414 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961@%3Cissues.solr.apache.org%3E"
},
{
"name": "[oss-security] 20210420 Vulnerability in Jenkins",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2021/04/20/3"
},
{
"name": "[ignite-issues] 20210426 [jira] [Commented] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[ignite-issues] 20210426 [jira] [Updated] (IGNITE-14527) Upgrade Jetty version to fix CVE-2021-2816[3,4,5] in Jetty",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46@%3Cissues.ignite.apache.org%3E"
},
{
"name": "[solr-issues] 20210507 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66@%3Cissues.solr.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] dongjoon-hyun commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7@%3Creviews.spark.apache.org%3E"
},
{
"name": "[spark-reviews] 20210517 [GitHub] [spark] jeffreysmooth commented on pull request #32095: [SPARK-34988][CORE][3.1] Upgrade Jetty for CVE-2021-28165",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35@%3Creviews.spark.apache.org%3E"
},
{
"name": "https://security.netapp.com/advisory/ntap-20210611-0006/",
"refsource": "CONFIRM",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20210611-0006/"
},
{
"name": "[solr-issues] 20210623 [jira] [Updated] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81@%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f@%3Cissues.solr.apache.org%3E"
},
{
"name": "[solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6@%3Cissues.solr.apache.org%3E"
},
{
"name": "[kafka-jira] 20210715 [jira] [Commented] (KAFKA-12655) CVE-2021-28165 - Upgrade jetty to 9.4.39",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a@%3Cjira.kafka.apache.org%3E"
},
{
"name": "N/A",
"refsource": "N/A",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"name": "DSA-4949",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2021/dsa-4949"
},
{
"name": "[solr-issues] 20210813 [jira] [Resolved] (SOLR-15338) High security vulnerability in Jetty library CVE-2021-28163 (+5) bundled within Solr",
"refsource": "MLIST",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c@%3Cissues.solr.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-07-29T17:05Z",
"publishedDate": "2021-04-01T15:15Z"
}
}
}
ICSMA-24-200-01
Vulnerability from csaf_cisa - Published: 2024-07-18 06:00 - Updated: 2024-11-21 07:00Summary
Philips Vue PACS (Update A)
Notes
Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation: Successful exploitation of these vulnerabilities could allow an attacker to gain access to the database, which could impact system availability and data integrity or cause a denial-of-service condition.
Critical infrastructure sectors: Healthcare and Public Health
Countries/areas deployed: Worldwide
Company headquarters location: Netherlands
Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:
Recommended Practices: Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
Recommended Practices: Locate control system networks and remote devices behind firewalls and isolating them from business networks.
Recommended Practices: When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.
Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
Recommended Practices: No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely.
6.5 (Medium)
6.8 (Medium)
References
18 references
Acknowledgments
TAS Health NZ
Camiel van Es
{
"document": {
"acknowledgments": [
{
"organization": "TAS Health NZ",
"summary": "reporting these vulnerabilities to Philips"
},
{
"organization": "Camiel van Es",
"summary": "reporting these vulnerabilities to Philips"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could allow an attacker to gain access to the database, which could impact system availability and data integrity or cause a denial-of-service condition.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Healthcare and Public Health",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Netherlands",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolating them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSMA-24-200-01 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsma-24-200-01.json"
},
{
"category": "self",
"summary": "ICSA Advisory ICSMA-24-200-01 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-200-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
}
],
"title": "Philips Vue PACS (Update A)",
"tracking": {
"current_release_date": "2024-11-21T07:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSMA-24-200-01",
"initial_release_date": "2024-07-18T06:00:00.000000Z",
"revision_history": [
{
"date": "2024-07-18T06:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Initial Publication"
},
{
"date": "2024-11-21T07:00:00.000000Z",
"legacy_version": "Update A",
"number": "2",
"summary": "Update A - Vulnerabilities removed due to further analysis by Philips showing they did not affect the device or had no security impact."
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c12.2.8.410",
"product": {
"name": "Philips Vue PACS: \u003c12.2.8.410",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "Vue PACS"
}
],
"category": "vendor",
"name": "Philips"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-28165",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "Attackers can exploit this vulnerability by making numerous requests or sending large amounts of data to the application, leading to resource exhaustion (e.g., memory, CPU), which can cause the application to crash or become unresponsive. This vulnerability does not expose patient data or allow for its modification. It allows an attacker, with access to the hospital\u0027s private network, which is protected by security controls (e.g., firewalls, VPNs), to send messages to the server, leading to potential CPU overload and a denial-of-service (DoS) condition. No response is sent back to the attacker, and patient information remains secure.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28165"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-28165"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Philips recommends the following mitigations:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "vendor_fix",
"details": "For CVE-2021-28165, Philips recommends configuring the Vue PACS environment per D000763414 \u2013 Vue_PACS_12_Ports_Protocols_Services_Guide available on Incenter. Vue PACS version 12.2.8.410* released in October 2023 prevents this vulnerability.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://incenter.medical.philips.com/Default.aspx?tabid=867"
},
{
"category": "vendor_fix",
"details": "For managed services customers, new releases will be made available upon resource availability. Releases are subject to country specific regulations. Users with questions regarding their specific Philips Vue PACS installations and new release eligibility should contact their local Philips sales representative or submit a request in the Philips Informatics Support portal.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.informatics.support.philips.com/csm"
},
{
"category": "mitigation",
"details": "Refer to the Philips advisory for more details.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.philips.com/productsecurity"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2023-40704",
"cwe": {
"id": "CWE-1392",
"name": "Use of Default Credentials"
},
"notes": [
{
"category": "summary",
"text": "The product does not require unique and complex passwords to be created during installation. Using Philips\u0027s default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40704"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40704"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Philips recommends the following mitigations:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "For CVE-2023-40704, Philips recommends no action needed due to low risk of exploitability, but customers can request that Philips update database password(s).",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "vendor_fix",
"details": "For managed services customers, new releases will be made available upon resource availability. Releases are subject to country specific regulations. Users with questions regarding their specific Philips Vue PACS installations and new release eligibility should contact their local Philips sales representative or submit a request in the Philips Informatics Support portal.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.informatics.support.philips.com/csm"
},
{
"category": "mitigation",
"details": "Refer to the Philips advisory for more details.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.philips.com/productsecurity"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
}
]
}
NCSC-2024-0231
Vulnerability from csaf_ncscnl - Published: 2024-05-22 11:13 - Updated: 2024-05-22 11:13Summary
Kwetsbaarheden verholpen in Atlassian producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Atlassian heeft kwetsbaarheden verholpen in diverse producten, zoals Jira, Confluence en Bitbucket.
Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Cross-Site Request Forgery (XSRF)
- Denial-of-Service (DoS)
- Omzeilen van authenticatie
- (Remote) code execution (Administrator/Root rechten)
- (Remote) code execution (Gebruikersrechten)
- SQL Injection
- Toegang tot systeemgegevens
Oplossingen: Atlassian heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie:
https://confluence.atlassian.com/security/security-bulletin-may-21-2024-1387867145.html
Kans: medium
Schade: high
CWE-284: Improper Access Control
CWE-20: Improper Input Validation
CWE-281: Improper Preservation of Permissions
CWE-400: Uncontrolled Resource Consumption
CWE-404: Improper Resource Shutdown or Release
CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-459: Incomplete Cleanup
CWE-502: Deserialization of Untrusted Data
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-913: Improper Control of Dynamically-Managed Code Resources
CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-444
- Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-96
- Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-96
- Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-502
- Deserialization of Untrusted Data
CWE-502
- Deserialization of Untrusted Data
CWE-96
- Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-96
- Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-96
- Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-96
- Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-502
- Deserialization of Untrusted Data
CWE-502
- Deserialization of Untrusted Data
CWE-502
- Deserialization of Untrusted Data
CWE-502
- Deserialization of Untrusted Data
CWE-502
- Deserialization of Untrusted Data
CWE-502
- Deserialization of Untrusted Data
CWE-400
- Uncontrolled Resource Consumption
CWE-502
- Deserialization of Untrusted Data
CWE-502
- Deserialization of Untrusted Data
CWE-404
- Improper Resource Shutdown or Release
CWE-913
- Improper Control of Dynamically-Managed Code Resources
CWE-281
- Improper Preservation of Permissions
CWE-89
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-770
- Allocation of Resources Without Limits or Throttling
CWE-284
- Improper Access Control
CWE-601
- URL Redirection to Untrusted Site ('Open Redirect')
CWE-459
- Incomplete Cleanup
CWE-20
- Improper Input Validation
References
33 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Atlassian heeft kwetsbaarheden verholpen in diverse producten, zoals Jira, Confluence en Bitbucket.",
"title": "Feiten"
},
{
"category": "description",
"text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Cross-Site Request Forgery (XSRF)\n- Denial-of-Service (DoS)\n- Omzeilen van authenticatie\n- (Remote) code execution (Administrator/Root rechten)\n- (Remote) code execution (Gebruikersrechten)\n- SQL Injection\n- Toegang tot systeemgegevens\n",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Atlassian heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie:\n\nhttps://confluence.atlassian.com/security/security-bulletin-may-21-2024-1387867145.html",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Improper Preservation of Permissions",
"title": "CWE-281"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "general",
"text": "Incomplete Cleanup",
"title": "CWE-459"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "general",
"text": "Improper Control of Dynamically-Managed Code Resources",
"title": "CWE-913"
},
{
"category": "general",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://confluence.atlassian.com/pages/viewpage.action?pageId=1387867145"
}
],
"title": "Kwetsbaarheden verholpen in Atlassian producten",
"tracking": {
"current_release_date": "2024-05-22T11:13:07.693855Z",
"id": "NCSC-2024-0231",
"initial_release_date": "2024-05-22T11:13:07.693855Z",
"revision_history": [
{
"date": "2024-05-22T11:13:07.693855Z",
"number": "0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "bamboo",
"product": {
"name": "bamboo",
"product_id": "CSAFPID-716889",
"product_identification_helper": {
"cpe": "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "bitbucket",
"product": {
"name": "bitbucket",
"product_id": "CSAFPID-344199",
"product_identification_helper": {
"cpe": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "confluence",
"product": {
"name": "confluence",
"product_id": "CSAFPID-551338",
"product_identification_helper": {
"cpe": "cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "crowd",
"product": {
"name": "crowd",
"product_id": "CSAFPID-344399",
"product_identification_helper": {
"cpe": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "jira_service_management",
"product": {
"name": "jira_service_management",
"product_id": "CSAFPID-343852",
"product_identification_helper": {
"cpe": "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*"
}
}
},
{
"category": "product_name",
"name": "jira_service_management",
"product": {
"name": "jira_service_management",
"product_id": "CSAFPID-343851",
"product_identification_helper": {
"cpe": "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*"
}
}
},
{
"category": "product_name",
"name": "jira",
"product": {
"name": "jira",
"product_id": "CSAFPID-98204",
"product_identification_helper": {
"cpe": "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "atlassian"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-7656",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2017-7656",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2017/CVE-2017-7656.json"
}
],
"title": "CVE-2017-7656"
},
{
"cve": "CVE-2017-9735",
"references": [
{
"category": "self",
"summary": "CVE-2017-9735",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2017/CVE-2017-9735.json"
}
],
"title": "CVE-2017-9735"
},
{
"cve": "CVE-2020-10672",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-10672",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-10672.json"
}
],
"title": "CVE-2020-10672"
},
{
"cve": "CVE-2020-10673",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-10673",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-10673.json"
}
],
"title": "CVE-2020-10673"
},
{
"cve": "CVE-2020-10968",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-10968",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-10968.json"
}
],
"title": "CVE-2020-10968"
},
{
"cve": "CVE-2020-10969",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-10969",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-10969.json"
}
],
"title": "CVE-2020-10969"
},
{
"cve": "CVE-2020-11111",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-11111",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-11111.json"
}
],
"title": "CVE-2020-11111"
},
{
"cve": "CVE-2020-11112",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-11112",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-11112.json"
}
],
"title": "CVE-2020-11112"
},
{
"cve": "CVE-2020-11113",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-11113",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-11113.json"
}
],
"title": "CVE-2020-11113"
},
{
"cve": "CVE-2020-24616",
"references": [
{
"category": "self",
"summary": "CVE-2020-24616",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-24616.json"
}
],
"title": "CVE-2020-24616"
},
{
"cve": "CVE-2020-35728",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-35728",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-35728.json"
}
],
"title": "CVE-2020-35728"
},
{
"cve": "CVE-2020-36179",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-36179",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36179.json"
}
],
"title": "CVE-2020-36179"
},
{
"cve": "CVE-2020-36180",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-36180",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36180.json"
}
],
"title": "CVE-2020-36180"
},
{
"cve": "CVE-2020-36181",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-36181",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36181.json"
}
],
"title": "CVE-2020-36181"
},
{
"cve": "CVE-2020-36182",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-36182",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36182.json"
}
],
"title": "CVE-2020-36182"
},
{
"cve": "CVE-2020-36184",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-36184",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36184.json"
}
],
"title": "CVE-2020-36184"
},
{
"cve": "CVE-2020-36188",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-36188",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36188.json"
}
],
"title": "CVE-2020-36188"
},
{
"cve": "CVE-2021-28165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2021-28165",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-28165.json"
}
],
"title": "CVE-2021-28165"
},
{
"cve": "CVE-2022-25647",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2022-25647",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-25647.json"
}
],
"title": "CVE-2022-25647"
},
{
"cve": "CVE-2022-41966",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2022-41966",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-41966.json"
}
],
"title": "CVE-2022-41966"
},
{
"cve": "CVE-2022-42003",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2022-42003",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-42003.json"
}
],
"title": "CVE-2022-42003"
},
{
"cve": "CVE-2023-4759",
"references": [
{
"category": "self",
"summary": "CVE-2023-4759",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4759.json"
}
],
"title": "CVE-2023-4759"
},
{
"cve": "CVE-2023-34396",
"references": [
{
"category": "self",
"summary": "CVE-2023-34396",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-34396.json"
}
],
"title": "CVE-2023-34396"
},
{
"cve": "CVE-2023-41835",
"cwe": {
"id": "CWE-913",
"name": "Improper Control of Dynamically-Managed Code Resources"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Dynamically-Managed Code Resources",
"title": "CWE-913"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2023-41835",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-41835.json"
}
],
"title": "CVE-2023-41835"
},
{
"cve": "CVE-2023-45859",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"notes": [
{
"category": "other",
"text": "Improper Preservation of Permissions",
"title": "CWE-281"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2023-45859",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45859.json"
}
],
"title": "CVE-2023-45859"
},
{
"cve": "CVE-2024-1597",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2024-1597",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-1597.json"
}
],
"title": "CVE-2024-1597"
},
{
"cve": "CVE-2024-21634",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2024-21634",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21634.json"
}
],
"title": "CVE-2024-21634"
},
{
"cve": "CVE-2024-21683",
"references": [
{
"category": "self",
"summary": "CVE-2024-21683",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21683.json"
}
],
"title": "CVE-2024-21683"
},
{
"cve": "CVE-2024-22257",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2024-22257",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22257.json"
}
],
"title": "CVE-2024-22257"
},
{
"cve": "CVE-2024-22262",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "other",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2024-22262",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22262.json"
}
],
"title": "CVE-2024-22262"
},
{
"cve": "CVE-2024-23672",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "other",
"text": "Incomplete Cleanup",
"title": "CWE-459"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2024-23672",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23672.json"
}
],
"title": "CVE-2024-23672"
},
{
"cve": "CVE-2024-24549",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2024-24549",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24549.json"
}
],
"title": "CVE-2024-24549"
}
]
}
OPENSUSE-SU-2021:2005-1
Vulnerability from csaf_opensuse - Published: 2021-07-11 08:05 - Updated: 2021-07-11 08:05Summary
Security update for jetty-minimal
Severity
Important
Notes
Title of the patch: Security update for jetty-minimal
Description of the patch: This update for jetty-minimal fixes the following issues:
Update to version 9.4.42.v20210604
- Fix: bsc#1187117, CVE-2021-28169 - possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory
- Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when client send data length > 17408
- Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
- Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory from deployment scan
Patchnames: openSUSE-SLE-15.3-2021-2005
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for jetty-minimal",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for jetty-minimal fixes the following issues:\n\nUpdate to version 9.4.42.v20210604\n\n- Fix: bsc#1187117, CVE-2021-28169 - possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory\n- Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when client send data length \u003e 17408\n- Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs\n- Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory from deployment scan\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2021-2005",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2005-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:2005-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U4KKN3NUA6VAZ6XTFLI3KB3IHAPVD46L/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:2005-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U4KKN3NUA6VAZ6XTFLI3KB3IHAPVD46L/"
},
{
"category": "self",
"summary": "SUSE Bug 1184366",
"url": "https://bugzilla.suse.com/1184366"
},
{
"category": "self",
"summary": "SUSE Bug 1184367",
"url": "https://bugzilla.suse.com/1184367"
},
{
"category": "self",
"summary": "SUSE Bug 1184368",
"url": "https://bugzilla.suse.com/1184368"
},
{
"category": "self",
"summary": "SUSE Bug 1187117",
"url": "https://bugzilla.suse.com/1187117"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28164 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28165 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28169 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28169/"
}
],
"title": "Security update for jetty-minimal",
"tracking": {
"current_release_date": "2021-07-11T08:05:38Z",
"generator": {
"date": "2021-07-11T08:05:38Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:2005-1",
"initial_release_date": "2021-07-11T08:05:38Z",
"revision_history": [
{
"date": "2021-07-11T08:05:38Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "jetty-annotations-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-annotations-9.4.42-3.9.1.noarch",
"product_id": "jetty-annotations-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-client-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-client-9.4.42-3.9.1.noarch",
"product_id": "jetty-client-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-continuation-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-continuation-9.4.42-3.9.1.noarch",
"product_id": "jetty-continuation-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-http-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-http-9.4.42-3.9.1.noarch",
"product_id": "jetty-http-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-io-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-io-9.4.42-3.9.1.noarch",
"product_id": "jetty-io-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-jaas-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-jaas-9.4.42-3.9.1.noarch",
"product_id": "jetty-jaas-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"product_id": "jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"product_id": "jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-jmx-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-jmx-9.4.42-3.9.1.noarch",
"product_id": "jetty-jmx-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-jndi-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-jndi-9.4.42-3.9.1.noarch",
"product_id": "jetty-jndi-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-jsp-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-jsp-9.4.42-3.9.1.noarch",
"product_id": "jetty-jsp-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"product_id": "jetty-minimal-javadoc-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-openid-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-openid-9.4.42-3.9.1.noarch",
"product_id": "jetty-openid-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-plus-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-plus-9.4.42-3.9.1.noarch",
"product_id": "jetty-plus-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-proxy-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-proxy-9.4.42-3.9.1.noarch",
"product_id": "jetty-proxy-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-security-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-security-9.4.42-3.9.1.noarch",
"product_id": "jetty-security-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-server-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-server-9.4.42-3.9.1.noarch",
"product_id": "jetty-server-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-servlet-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-servlet-9.4.42-3.9.1.noarch",
"product_id": "jetty-servlet-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-util-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-util-9.4.42-3.9.1.noarch",
"product_id": "jetty-util-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-util-ajax-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-util-ajax-9.4.42-3.9.1.noarch",
"product_id": "jetty-util-ajax-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-webapp-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-webapp-9.4.42-3.9.1.noarch",
"product_id": "jetty-webapp-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-websocket-api-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-websocket-api-9.4.42-3.9.1.noarch",
"product_id": "jetty-websocket-api-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-websocket-client-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-websocket-client-9.4.42-3.9.1.noarch",
"product_id": "jetty-websocket-client-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-websocket-common-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-websocket-common-9.4.42-3.9.1.noarch",
"product_id": "jetty-websocket-common-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"product_id": "jetty-websocket-javadoc-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-websocket-server-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-websocket-server-9.4.42-3.9.1.noarch",
"product_id": "jetty-websocket-server-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"product_id": "jetty-websocket-servlet-9.4.42-3.9.1.noarch"
}
},
{
"category": "product_version",
"name": "jetty-xml-9.4.42-3.9.1.noarch",
"product": {
"name": "jetty-xml-9.4.42-3.9.1.noarch",
"product_id": "jetty-xml-9.4.42-3.9.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-annotations-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-annotations-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-client-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-client-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-continuation-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-continuation-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-http-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-io-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-io-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jaas-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-jaas-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jmx-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-jmx-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jndi-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-jndi-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jsp-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-jsp-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-minimal-javadoc-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-openid-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-openid-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-plus-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-plus-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-proxy-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-proxy-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-security-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-security-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-server-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-server-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlet-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-servlet-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-util-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-ajax-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-util-ajax-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-webapp-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-webapp-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-websocket-api-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-websocket-api-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-websocket-client-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-websocket-client-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-websocket-common-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-websocket-common-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-websocket-javadoc-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-websocket-server-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-websocket-server-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-websocket-servlet-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-xml-9.4.42-3.9.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
},
"product_reference": "jetty-xml-9.4.42-3.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-28163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28163"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28163",
"url": "https://www.suse.com/security/cve/CVE-2021-28163"
},
{
"category": "external",
"summary": "SUSE Bug 1184366 for CVE-2021-28163",
"url": "https://bugzilla.suse.com/1184366"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-11T08:05:38Z",
"details": "moderate"
}
],
"title": "CVE-2021-28163"
},
{
"cve": "CVE-2021-28164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28164"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28164",
"url": "https://www.suse.com/security/cve/CVE-2021-28164"
},
{
"category": "external",
"summary": "SUSE Bug 1184368 for CVE-2021-28164",
"url": "https://bugzilla.suse.com/1184368"
},
{
"category": "external",
"summary": "SUSE Bug 1188438 for CVE-2021-28164",
"url": "https://bugzilla.suse.com/1188438"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-11T08:05:38Z",
"details": "moderate"
}
],
"title": "CVE-2021-28164"
},
{
"cve": "CVE-2021-28165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28165"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28165",
"url": "https://www.suse.com/security/cve/CVE-2021-28165"
},
{
"category": "external",
"summary": "SUSE Bug 1184367 for CVE-2021-28165",
"url": "https://bugzilla.suse.com/1184367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-11T08:05:38Z",
"details": "important"
}
],
"title": "CVE-2021-28165"
},
{
"cve": "CVE-2021-28169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28169"
}
],
"notes": [
{
"category": "general",
"text": "For Eclipse Jetty versions \u003c= 9.4.40, \u003c= 10.0.2, \u003c= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28169",
"url": "https://www.suse.com/security/cve/CVE-2021-28169"
},
{
"category": "external",
"summary": "SUSE Bug 1187117 for CVE-2021-28169",
"url": "https://bugzilla.suse.com/1187117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:jetty-annotations-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-continuation-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-http-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-io-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jaas-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jmx-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jndi-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-jsp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-minimal-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-openid-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-plus-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-proxy-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-security-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-util-ajax-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-webapp-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-api-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-client-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-common-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-javadoc-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-server-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-websocket-servlet-9.4.42-3.9.1.noarch",
"openSUSE Leap 15.3:jetty-xml-9.4.42-3.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-11T08:05:38Z",
"details": "moderate"
}
],
"title": "CVE-2021-28169"
}
]
}
OPENSUSE-SU-2024:10878-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
jetty-annotations-9.4.43-1.2 on GA media
Severity
Moderate
Notes
Title of the patch: jetty-annotations-9.4.43-1.2 on GA media
Description of the patch: These are all security issues fixed in the jetty-annotations-9.4.43-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-10878
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.8 (Medium)
Affected products
Recommended
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "jetty-annotations-9.4.43-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the jetty-annotations-9.4.43-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10878",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10878-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27218 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27223 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28164 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28165 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28169 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-34429 page",
"url": "https://www.suse.com/security/cve/CVE-2021-34429/"
}
],
"title": "jetty-annotations-9.4.43-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10878-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "jetty-annotations-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-annotations-9.4.43-1.2.aarch64",
"product_id": "jetty-annotations-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-ant-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-ant-9.4.43-1.2.aarch64",
"product_id": "jetty-ant-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-cdi-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-cdi-9.4.43-1.2.aarch64",
"product_id": "jetty-cdi-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-client-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-client-9.4.43-1.2.aarch64",
"product_id": "jetty-client-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-continuation-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-continuation-9.4.43-1.2.aarch64",
"product_id": "jetty-continuation-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-deploy-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-deploy-9.4.43-1.2.aarch64",
"product_id": "jetty-deploy-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-fcgi-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-fcgi-9.4.43-1.2.aarch64",
"product_id": "jetty-fcgi-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-http-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-http-9.4.43-1.2.aarch64",
"product_id": "jetty-http-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-http-spi-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-http-spi-9.4.43-1.2.aarch64",
"product_id": "jetty-http-spi-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-io-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-io-9.4.43-1.2.aarch64",
"product_id": "jetty-io-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-jaas-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-jaas-9.4.43-1.2.aarch64",
"product_id": "jetty-jaas-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-jmx-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-jmx-9.4.43-1.2.aarch64",
"product_id": "jetty-jmx-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-jndi-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-jndi-9.4.43-1.2.aarch64",
"product_id": "jetty-jndi-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-jsp-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-jsp-9.4.43-1.2.aarch64",
"product_id": "jetty-jsp-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"product_id": "jetty-minimal-javadoc-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-openid-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-openid-9.4.43-1.2.aarch64",
"product_id": "jetty-openid-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-plus-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-plus-9.4.43-1.2.aarch64",
"product_id": "jetty-plus-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-proxy-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-proxy-9.4.43-1.2.aarch64",
"product_id": "jetty-proxy-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-quickstart-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-quickstart-9.4.43-1.2.aarch64",
"product_id": "jetty-quickstart-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-rewrite-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-rewrite-9.4.43-1.2.aarch64",
"product_id": "jetty-rewrite-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-security-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-security-9.4.43-1.2.aarch64",
"product_id": "jetty-security-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-server-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-server-9.4.43-1.2.aarch64",
"product_id": "jetty-server-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-servlet-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-servlet-9.4.43-1.2.aarch64",
"product_id": "jetty-servlet-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-servlets-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-servlets-9.4.43-1.2.aarch64",
"product_id": "jetty-servlets-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-start-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-start-9.4.43-1.2.aarch64",
"product_id": "jetty-start-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-util-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-util-9.4.43-1.2.aarch64",
"product_id": "jetty-util-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-util-ajax-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-util-ajax-9.4.43-1.2.aarch64",
"product_id": "jetty-util-ajax-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-webapp-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-webapp-9.4.43-1.2.aarch64",
"product_id": "jetty-webapp-9.4.43-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "jetty-xml-9.4.43-1.2.aarch64",
"product": {
"name": "jetty-xml-9.4.43-1.2.aarch64",
"product_id": "jetty-xml-9.4.43-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "jetty-annotations-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-annotations-9.4.43-1.2.ppc64le",
"product_id": "jetty-annotations-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-ant-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-ant-9.4.43-1.2.ppc64le",
"product_id": "jetty-ant-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-cdi-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-cdi-9.4.43-1.2.ppc64le",
"product_id": "jetty-cdi-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-client-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-client-9.4.43-1.2.ppc64le",
"product_id": "jetty-client-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-continuation-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-continuation-9.4.43-1.2.ppc64le",
"product_id": "jetty-continuation-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-deploy-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-deploy-9.4.43-1.2.ppc64le",
"product_id": "jetty-deploy-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-fcgi-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-fcgi-9.4.43-1.2.ppc64le",
"product_id": "jetty-fcgi-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-http-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-http-9.4.43-1.2.ppc64le",
"product_id": "jetty-http-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-http-spi-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-http-spi-9.4.43-1.2.ppc64le",
"product_id": "jetty-http-spi-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-io-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-io-9.4.43-1.2.ppc64le",
"product_id": "jetty-io-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-jaas-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-jaas-9.4.43-1.2.ppc64le",
"product_id": "jetty-jaas-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-jmx-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-jmx-9.4.43-1.2.ppc64le",
"product_id": "jetty-jmx-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-jndi-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-jndi-9.4.43-1.2.ppc64le",
"product_id": "jetty-jndi-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-jsp-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-jsp-9.4.43-1.2.ppc64le",
"product_id": "jetty-jsp-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"product_id": "jetty-minimal-javadoc-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-openid-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-openid-9.4.43-1.2.ppc64le",
"product_id": "jetty-openid-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-plus-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-plus-9.4.43-1.2.ppc64le",
"product_id": "jetty-plus-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-proxy-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-proxy-9.4.43-1.2.ppc64le",
"product_id": "jetty-proxy-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-quickstart-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-quickstart-9.4.43-1.2.ppc64le",
"product_id": "jetty-quickstart-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-rewrite-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-rewrite-9.4.43-1.2.ppc64le",
"product_id": "jetty-rewrite-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-security-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-security-9.4.43-1.2.ppc64le",
"product_id": "jetty-security-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-server-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-server-9.4.43-1.2.ppc64le",
"product_id": "jetty-server-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-servlet-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-servlet-9.4.43-1.2.ppc64le",
"product_id": "jetty-servlet-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-servlets-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-servlets-9.4.43-1.2.ppc64le",
"product_id": "jetty-servlets-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-start-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-start-9.4.43-1.2.ppc64le",
"product_id": "jetty-start-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-util-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-util-9.4.43-1.2.ppc64le",
"product_id": "jetty-util-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-util-ajax-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-util-ajax-9.4.43-1.2.ppc64le",
"product_id": "jetty-util-ajax-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-webapp-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-webapp-9.4.43-1.2.ppc64le",
"product_id": "jetty-webapp-9.4.43-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "jetty-xml-9.4.43-1.2.ppc64le",
"product": {
"name": "jetty-xml-9.4.43-1.2.ppc64le",
"product_id": "jetty-xml-9.4.43-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "jetty-annotations-9.4.43-1.2.s390x",
"product": {
"name": "jetty-annotations-9.4.43-1.2.s390x",
"product_id": "jetty-annotations-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-ant-9.4.43-1.2.s390x",
"product": {
"name": "jetty-ant-9.4.43-1.2.s390x",
"product_id": "jetty-ant-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-cdi-9.4.43-1.2.s390x",
"product": {
"name": "jetty-cdi-9.4.43-1.2.s390x",
"product_id": "jetty-cdi-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-client-9.4.43-1.2.s390x",
"product": {
"name": "jetty-client-9.4.43-1.2.s390x",
"product_id": "jetty-client-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-continuation-9.4.43-1.2.s390x",
"product": {
"name": "jetty-continuation-9.4.43-1.2.s390x",
"product_id": "jetty-continuation-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-deploy-9.4.43-1.2.s390x",
"product": {
"name": "jetty-deploy-9.4.43-1.2.s390x",
"product_id": "jetty-deploy-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-fcgi-9.4.43-1.2.s390x",
"product": {
"name": "jetty-fcgi-9.4.43-1.2.s390x",
"product_id": "jetty-fcgi-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-http-9.4.43-1.2.s390x",
"product": {
"name": "jetty-http-9.4.43-1.2.s390x",
"product_id": "jetty-http-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-http-spi-9.4.43-1.2.s390x",
"product": {
"name": "jetty-http-spi-9.4.43-1.2.s390x",
"product_id": "jetty-http-spi-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-io-9.4.43-1.2.s390x",
"product": {
"name": "jetty-io-9.4.43-1.2.s390x",
"product_id": "jetty-io-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-jaas-9.4.43-1.2.s390x",
"product": {
"name": "jetty-jaas-9.4.43-1.2.s390x",
"product_id": "jetty-jaas-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-jmx-9.4.43-1.2.s390x",
"product": {
"name": "jetty-jmx-9.4.43-1.2.s390x",
"product_id": "jetty-jmx-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-jndi-9.4.43-1.2.s390x",
"product": {
"name": "jetty-jndi-9.4.43-1.2.s390x",
"product_id": "jetty-jndi-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-jsp-9.4.43-1.2.s390x",
"product": {
"name": "jetty-jsp-9.4.43-1.2.s390x",
"product_id": "jetty-jsp-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-minimal-javadoc-9.4.43-1.2.s390x",
"product": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.s390x",
"product_id": "jetty-minimal-javadoc-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-openid-9.4.43-1.2.s390x",
"product": {
"name": "jetty-openid-9.4.43-1.2.s390x",
"product_id": "jetty-openid-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-plus-9.4.43-1.2.s390x",
"product": {
"name": "jetty-plus-9.4.43-1.2.s390x",
"product_id": "jetty-plus-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-proxy-9.4.43-1.2.s390x",
"product": {
"name": "jetty-proxy-9.4.43-1.2.s390x",
"product_id": "jetty-proxy-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-quickstart-9.4.43-1.2.s390x",
"product": {
"name": "jetty-quickstart-9.4.43-1.2.s390x",
"product_id": "jetty-quickstart-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-rewrite-9.4.43-1.2.s390x",
"product": {
"name": "jetty-rewrite-9.4.43-1.2.s390x",
"product_id": "jetty-rewrite-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-security-9.4.43-1.2.s390x",
"product": {
"name": "jetty-security-9.4.43-1.2.s390x",
"product_id": "jetty-security-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-server-9.4.43-1.2.s390x",
"product": {
"name": "jetty-server-9.4.43-1.2.s390x",
"product_id": "jetty-server-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-servlet-9.4.43-1.2.s390x",
"product": {
"name": "jetty-servlet-9.4.43-1.2.s390x",
"product_id": "jetty-servlet-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-servlets-9.4.43-1.2.s390x",
"product": {
"name": "jetty-servlets-9.4.43-1.2.s390x",
"product_id": "jetty-servlets-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-start-9.4.43-1.2.s390x",
"product": {
"name": "jetty-start-9.4.43-1.2.s390x",
"product_id": "jetty-start-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-util-9.4.43-1.2.s390x",
"product": {
"name": "jetty-util-9.4.43-1.2.s390x",
"product_id": "jetty-util-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-util-ajax-9.4.43-1.2.s390x",
"product": {
"name": "jetty-util-ajax-9.4.43-1.2.s390x",
"product_id": "jetty-util-ajax-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-webapp-9.4.43-1.2.s390x",
"product": {
"name": "jetty-webapp-9.4.43-1.2.s390x",
"product_id": "jetty-webapp-9.4.43-1.2.s390x"
}
},
{
"category": "product_version",
"name": "jetty-xml-9.4.43-1.2.s390x",
"product": {
"name": "jetty-xml-9.4.43-1.2.s390x",
"product_id": "jetty-xml-9.4.43-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "jetty-annotations-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-annotations-9.4.43-1.2.x86_64",
"product_id": "jetty-annotations-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-ant-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-ant-9.4.43-1.2.x86_64",
"product_id": "jetty-ant-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-cdi-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-cdi-9.4.43-1.2.x86_64",
"product_id": "jetty-cdi-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-client-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-client-9.4.43-1.2.x86_64",
"product_id": "jetty-client-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-continuation-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-continuation-9.4.43-1.2.x86_64",
"product_id": "jetty-continuation-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-deploy-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-deploy-9.4.43-1.2.x86_64",
"product_id": "jetty-deploy-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-fcgi-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-fcgi-9.4.43-1.2.x86_64",
"product_id": "jetty-fcgi-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-http-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-http-9.4.43-1.2.x86_64",
"product_id": "jetty-http-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-http-spi-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-http-spi-9.4.43-1.2.x86_64",
"product_id": "jetty-http-spi-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-io-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-io-9.4.43-1.2.x86_64",
"product_id": "jetty-io-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-jaas-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-jaas-9.4.43-1.2.x86_64",
"product_id": "jetty-jaas-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-jmx-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-jmx-9.4.43-1.2.x86_64",
"product_id": "jetty-jmx-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-jndi-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-jndi-9.4.43-1.2.x86_64",
"product_id": "jetty-jndi-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-jsp-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-jsp-9.4.43-1.2.x86_64",
"product_id": "jetty-jsp-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"product_id": "jetty-minimal-javadoc-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-openid-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-openid-9.4.43-1.2.x86_64",
"product_id": "jetty-openid-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-plus-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-plus-9.4.43-1.2.x86_64",
"product_id": "jetty-plus-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-proxy-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-proxy-9.4.43-1.2.x86_64",
"product_id": "jetty-proxy-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-quickstart-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-quickstart-9.4.43-1.2.x86_64",
"product_id": "jetty-quickstart-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-rewrite-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-rewrite-9.4.43-1.2.x86_64",
"product_id": "jetty-rewrite-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-security-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-security-9.4.43-1.2.x86_64",
"product_id": "jetty-security-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-server-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-server-9.4.43-1.2.x86_64",
"product_id": "jetty-server-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-servlet-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-servlet-9.4.43-1.2.x86_64",
"product_id": "jetty-servlet-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-servlets-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-servlets-9.4.43-1.2.x86_64",
"product_id": "jetty-servlets-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-start-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-start-9.4.43-1.2.x86_64",
"product_id": "jetty-start-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-util-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-util-9.4.43-1.2.x86_64",
"product_id": "jetty-util-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-util-ajax-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-util-ajax-9.4.43-1.2.x86_64",
"product_id": "jetty-util-ajax-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-webapp-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-webapp-9.4.43-1.2.x86_64",
"product_id": "jetty-webapp-9.4.43-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "jetty-xml-9.4.43-1.2.x86_64",
"product": {
"name": "jetty-xml-9.4.43-1.2.x86_64",
"product_id": "jetty-xml-9.4.43-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-annotations-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-annotations-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-annotations-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-annotations-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-annotations-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x"
},
"product_reference": "jetty-annotations-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-annotations-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-annotations-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-ant-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-ant-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-ant-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-ant-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-ant-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x"
},
"product_reference": "jetty-ant-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-ant-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-ant-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-cdi-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-cdi-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-cdi-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-cdi-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-cdi-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x"
},
"product_reference": "jetty-cdi-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-cdi-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-cdi-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-client-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-client-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-client-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-client-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-client-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x"
},
"product_reference": "jetty-client-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-client-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-client-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-continuation-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-continuation-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-continuation-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-continuation-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-continuation-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x"
},
"product_reference": "jetty-continuation-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-continuation-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-continuation-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-deploy-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-deploy-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-deploy-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-deploy-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-deploy-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x"
},
"product_reference": "jetty-deploy-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-deploy-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-deploy-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-fcgi-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-fcgi-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-fcgi-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-fcgi-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-fcgi-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x"
},
"product_reference": "jetty-fcgi-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-fcgi-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-fcgi-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-http-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-http-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x"
},
"product_reference": "jetty-http-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-http-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-spi-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-http-spi-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-spi-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-http-spi-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-spi-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x"
},
"product_reference": "jetty-http-spi-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-http-spi-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-http-spi-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-io-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-io-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-io-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-io-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-io-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x"
},
"product_reference": "jetty-io-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-io-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-io-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jaas-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-jaas-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jaas-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-jaas-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jaas-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x"
},
"product_reference": "jetty-jaas-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jaas-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-jaas-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jmx-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-jmx-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jmx-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-jmx-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jmx-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x"
},
"product_reference": "jetty-jmx-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jmx-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-jmx-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jndi-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-jndi-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jndi-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-jndi-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jndi-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x"
},
"product_reference": "jetty-jndi-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jndi-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-jndi-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jsp-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-jsp-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jsp-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-jsp-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jsp-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x"
},
"product_reference": "jetty-jsp-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-jsp-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-jsp-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x"
},
"product_reference": "jetty-minimal-javadoc-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-minimal-javadoc-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-openid-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-openid-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-openid-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-openid-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-openid-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x"
},
"product_reference": "jetty-openid-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-openid-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-openid-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-plus-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-plus-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-plus-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-plus-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-plus-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x"
},
"product_reference": "jetty-plus-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-plus-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-plus-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-proxy-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-proxy-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-proxy-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-proxy-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-proxy-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x"
},
"product_reference": "jetty-proxy-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-proxy-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-proxy-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-quickstart-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-quickstart-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-quickstart-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-quickstart-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-quickstart-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x"
},
"product_reference": "jetty-quickstart-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-quickstart-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-quickstart-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-rewrite-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-rewrite-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-rewrite-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-rewrite-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-rewrite-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x"
},
"product_reference": "jetty-rewrite-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-rewrite-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-rewrite-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-security-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-security-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-security-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-security-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-security-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x"
},
"product_reference": "jetty-security-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-security-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-security-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-server-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-server-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-server-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-server-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-server-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x"
},
"product_reference": "jetty-server-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-server-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-server-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlet-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-servlet-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlet-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-servlet-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlet-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x"
},
"product_reference": "jetty-servlet-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlet-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-servlet-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlets-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-servlets-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlets-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-servlets-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlets-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x"
},
"product_reference": "jetty-servlets-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-servlets-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-servlets-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-start-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-start-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-start-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-start-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-start-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x"
},
"product_reference": "jetty-start-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-start-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-start-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-util-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-util-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x"
},
"product_reference": "jetty-util-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-util-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-ajax-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-util-ajax-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-ajax-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-util-ajax-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-ajax-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x"
},
"product_reference": "jetty-util-ajax-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-util-ajax-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-util-ajax-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-webapp-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-webapp-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-webapp-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-webapp-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-webapp-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x"
},
"product_reference": "jetty-webapp-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-webapp-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-webapp-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-xml-9.4.43-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64"
},
"product_reference": "jetty-xml-9.4.43-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-xml-9.4.43-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le"
},
"product_reference": "jetty-xml-9.4.43-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-xml-9.4.43-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x"
},
"product_reference": "jetty-xml-9.4.43-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jetty-xml-9.4.43-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
},
"product_reference": "jetty-xml-9.4.43-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-27218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27218"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27218",
"url": "https://www.suse.com/security/cve/CVE-2020-27218"
},
{
"category": "external",
"summary": "SUSE Bug 1179727 for CVE-2020-27218",
"url": "https://bugzilla.suse.com/1179727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-27218"
},
{
"cve": "CVE-2020-27223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27223"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of \"quality\" (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27223",
"url": "https://www.suse.com/security/cve/CVE-2020-27223"
},
{
"category": "external",
"summary": "SUSE Bug 1182898 for CVE-2020-27223",
"url": "https://bugzilla.suse.com/1182898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-27223"
},
{
"cve": "CVE-2021-28163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28163"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28163",
"url": "https://www.suse.com/security/cve/CVE-2021-28163"
},
{
"category": "external",
"summary": "SUSE Bug 1184366 for CVE-2021-28163",
"url": "https://bugzilla.suse.com/1184366"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-28163"
},
{
"cve": "CVE-2021-28164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28164"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28164",
"url": "https://www.suse.com/security/cve/CVE-2021-28164"
},
{
"category": "external",
"summary": "SUSE Bug 1184368 for CVE-2021-28164",
"url": "https://bugzilla.suse.com/1184368"
},
{
"category": "external",
"summary": "SUSE Bug 1188438 for CVE-2021-28164",
"url": "https://bugzilla.suse.com/1188438"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-28164"
},
{
"cve": "CVE-2021-28165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28165"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28165",
"url": "https://www.suse.com/security/cve/CVE-2021-28165"
},
{
"category": "external",
"summary": "SUSE Bug 1184367 for CVE-2021-28165",
"url": "https://bugzilla.suse.com/1184367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-28165"
},
{
"cve": "CVE-2021-28169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28169"
}
],
"notes": [
{
"category": "general",
"text": "For Eclipse Jetty versions \u003c= 9.4.40, \u003c= 10.0.2, \u003c= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28169",
"url": "https://www.suse.com/security/cve/CVE-2021-28169"
},
{
"category": "external",
"summary": "SUSE Bug 1187117 for CVE-2021-28169",
"url": "https://bugzilla.suse.com/1187117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-28169"
},
{
"cve": "CVE-2021-34429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-34429"
}
],
"notes": [
{
"category": "general",
"text": "For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 \u0026 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-34429",
"url": "https://www.suse.com/security/cve/CVE-2021-34429"
},
{
"category": "external",
"summary": "SUSE Bug 1188438 for CVE-2021-34429",
"url": "https://bugzilla.suse.com/1188438"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-annotations-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-ant-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-cdi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-client-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-continuation-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-deploy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-fcgi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-http-spi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-io-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jaas-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jmx-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jndi-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-jsp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-openid-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-plus-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-proxy-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-quickstart-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-rewrite-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-security-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-server-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlet-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-servlets-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-start-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-util-ajax-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-webapp-9.4.43-1.2.x86_64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.aarch64",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.ppc64le",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.s390x",
"openSUSE Tumbleweed:jetty-xml-9.4.43-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-34429"
}
]
}
RHSA-2021:1509
Vulnerability from csaf_redhat - Published: 2021-05-06 17:45 - Updated: 2026-05-14 22:31Summary
Red Hat Security Advisory: rh-eclipse-jetty security update
Severity
Moderate
Notes
Topic: An update for rh-eclipse-jetty is now available for Red Hat Developer Tools.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Jetty is a 100% Java HTTP Server and Servlet Container.
The following packages have been upgraded to a later upstream version: rh-eclipse-jetty (9.4.40).
Security Fix(es):
* jetty: Symlink directory exposes webapp directory contents (CVE-2021-28163)
* jetty: Ambiguous paths can access WEB-INF (CVE-2021-28164)
* jetty: Resource exhaustion when receiving an invalid large TLS frame (CVE-2021-28165)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
If the ${jetty.base} directory or the ${jetty.base}/webapps directory is a symlink the contents of the ${jetty.base}/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
In Jetty the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can use this vulnerability to reveal sensitive information regarding the implementation of a web application.
5.3 (Medium)
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing high CPU resources utilization. The highest threat from this vulnerability is to service availability.
7.5 (High)
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rh-eclipse-jetty is now available for Red Hat Developer Tools.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Jetty is a 100% Java HTTP Server and Servlet Container.\n\nThe following packages have been upgraded to a later upstream version: rh-eclipse-jetty (9.4.40).\n\nSecurity Fix(es):\n\n* jetty: Symlink directory exposes webapp directory contents (CVE-2021-28163)\n\n* jetty: Ambiguous paths can access WEB-INF (CVE-2021-28164)\n\n* jetty: Resource exhaustion when receiving an invalid large TLS frame (CVE-2021-28165)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:1509",
"url": "https://access.redhat.com/errata/RHSA-2021:1509"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_eclipse_4.19/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_eclipse_4.19/"
},
{
"category": "external",
"summary": "1945710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945710"
},
{
"category": "external",
"summary": "1945712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945712"
},
{
"category": "external",
"summary": "1945714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1509.json"
}
],
"title": "Red Hat Security Advisory: rh-eclipse-jetty security update",
"tracking": {
"current_release_date": "2026-05-14T22:31:08+00:00",
"generator": {
"date": "2026-05-14T22:31:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2021:1509",
"initial_release_date": "2021-05-06T17:45:26+00:00",
"revision_history": [
{
"date": "2021-05-06T17:45:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-05-06T17:45:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:31:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:devtools:2021"
}
}
},
{
"category": "product_name",
"name": "Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:devtools:2021"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Tools"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"product": {
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"product_id": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty@9.4.40-1.1.el7_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-client@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-continuation@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-http@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-io@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-jaas@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-javadoc@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-jmx@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-security@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-server@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-servlet@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-util@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-util-ajax@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-webapp@9.4.40-1.1.el7_9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"product": {
"name": "rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"product_id": "rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-eclipse-jetty-xml@9.4.40-1.1.el7_9?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src"
},
"product_reference": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src"
},
"product_reference": "rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
},
"product_reference": "rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"relates_to_product_reference": "7Workstation-DevTools-2021.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-28163",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945710"
}
],
"notes": [
{
"category": "description",
"text": "If the ${jetty.base} directory or the ${jetty.base}/webapps directory is a symlink the contents of the ${jetty.base}/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Symlink directory exposes webapp directory contents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Container Platform (OCP), the hive/presto/hadoop components that comprise the OCP metering stack, ship the vulnerable version of jetty.\nSince the release of OCP 4.6, the metering product has been deprecated [1], hence the affected components are marked as wontfix.\nThis may be fixed in the future.\n\n[1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated\n\nRed Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.\n\nRed Hat CodeReady Studio 12 is not affected by this vulnerability because it does not ship a vulnerable version of jetty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28163"
},
{
"category": "external",
"summary": "RHBZ#1945710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945710"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28163"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28163",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28163"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-06T17:45:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1509"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Symlink directory exposes webapp directory contents"
},
{
"cve": "CVE-2021-28164",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945712"
}
],
"notes": [
{
"category": "description",
"text": "In Jetty the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can use this vulnerability to reveal sensitive information regarding the implementation of a web application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Ambiguous paths can access WEB-INF",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.\n\nRed Hat CodeReady Studio 12 is not affected by this vulnerability because it does not ship a vulnerable version of jetty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28164"
},
{
"category": "external",
"summary": "RHBZ#1945712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28164",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28164"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28164",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28164"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-v7ff-8wcx-gmc5",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-v7ff-8wcx-gmc5"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-06T17:45:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1509"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Ambiguous paths can access WEB-INF"
},
{
"cve": "CVE-2021-28165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945714"
}
],
"notes": [
{
"category": "description",
"text": "When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing high CPU resources utilization. The highest threat from this vulnerability is to service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Resource exhaustion when receiving an invalid large TLS frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Container Platform (OCP), the hive/presto/hadoop components that comprise the OCP metering stack, ship the vulnerable version of jetty.\nSince the release of OCP 4.6, the metering product has been deprecated [1], hence the affected components are marked as wontfix.\nThis may be fixed in the future.\n\n[1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated\n\nRed Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28165"
},
{
"category": "external",
"summary": "RHBZ#1945714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28165",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-06T17:45:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1509"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Server-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Server-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-0:9.4.40-1.1.el7_9.src",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-client-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-continuation-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-http-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-io-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jaas-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-javadoc-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-jmx-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-security-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-server-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-servlet-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-util-ajax-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-webapp-0:9.4.40-1.1.el7_9.noarch",
"7Workstation-DevTools-2021.2:rh-eclipse-jetty-xml-0:9.4.40-1.1.el7_9.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Resource exhaustion when receiving an invalid large TLS frame"
}
]
}
RHSA-2021:1551
Vulnerability from csaf_redhat - Published: 2021-05-19 15:03 - Updated: 2026-05-14 22:31Summary
Red Hat Security Advisory: OpenShift Container Platform 4.7.11 security and bug fix update
Severity
Moderate
Notes
Topic: Red Hat OpenShift Container Platform release 4.7.11 is now available with updates to packages and images that fix several bugs.
This release includes a security update for Red Hat OpenShift Container Platform 4.7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.7.11. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2021:1550
Security Fix(es):
* golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)
* golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)
* jetty: Symlink directory exposes webapp directory contents (CVE-2021-28163)
* jetty: Resource exhaustion when receiving an invalid large TLS frame (CVE-2021-28165)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.7 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The highest threat from this vulnerability is to system availability.
7.5 (High)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
Known not affected
62 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — |
Threats
Impact
Moderate
A flaw detected in golang: crypto/elliptic, in which P-224 keys as generated can return incorrect inputs, reducing the strength of the cryptography. The highest threat from this vulnerability is confidentiality and integrity.
6.5 (Medium)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
Known not affected
62 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — |
Threats
Impact
Moderate
A flaw was found in Jenkins. Due to lack of validation of type of object created after loading the data submitted to the config.xml REST API endpoint of a node, an attackers with Computer/Configure permission are able to replace a node with one of a different type.
CWE-20 - Improper Input ValidationAffected products
Fixed
2 products
Known not affected
86 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Threats
Impact
Low
A flaw was found in Jenkins. Due to lack of validation of the newly created view name, an attackers with View/Create permission are allowed to create views with invalid or already-used names.
4.3 (Medium)
Affected products
Fixed
2 products
Known not affected
86 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Threats
Impact
Low
If the ${jetty.base} directory or the ${jetty.base}/webapps directory is a symlink the contents of the ${jetty.base}/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — |
Threats
Impact
Moderate
When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing high CPU resources utilization. The highest threat from this vulnerability is to service availability.
7.5 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 | — |
Vendor Fix
fix
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64 | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch | — | ||
| Unresolved product id: 8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch | — |
Threats
Impact
Moderate
References
35 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.7.11 is now available with updates to packages and images that fix several bugs.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.7.11. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHBA-2021:1550\n\nSecurity Fix(es):\n\n* golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)\n\n* golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)\n\n* jetty: Symlink directory exposes webapp directory contents (CVE-2021-28163)\n\n* jetty: Resource exhaustion when receiving an invalid large TLS frame (CVE-2021-28165)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.7 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:1551",
"url": "https://access.redhat.com/errata/RHSA-2021:1551"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1897635",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1897635"
},
{
"category": "external",
"summary": "1918750",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918750"
},
{
"category": "external",
"summary": "1945710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945710"
},
{
"category": "external",
"summary": "1945714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945714"
},
{
"category": "external",
"summary": "1959660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1959660"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1551.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.7.11 security and bug fix update",
"tracking": {
"current_release_date": "2026-05-14T22:31:16+00:00",
"generator": {
"date": "2026-05-14T22:31:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2021:1551",
"initial_release_date": "2021-05-19T15:03:37+00:00",
"revision_history": [
{
"date": "2021-05-19T15:03:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-05-19T15:03:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:31:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.7",
"product": {
"name": "Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.7::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.7",
"product": {
"name": "Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.7::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"product": {
"name": "openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"product_id": "openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic@16.0.4-0.20210510131210.6787142.el8?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"product": {
"name": "openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"product_id": "openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr@4.7.0-202105111743.p0.git.36c2cdd.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"product": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"product_id": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202105111743.p0.git.39cfc66.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"product": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"product_id": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"product": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"product_id": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202105111743.p0.git.95881af.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"product": {
"name": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"product_id": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift@4.7.0-202105111743.p0.git.75370d3.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"product": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"product_id": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.20.2-11.rhaos4.7.git704b03d.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.277.3.1620393611-1.el8.src",
"product": {
"name": "jenkins-0:2.277.3.1620393611-1.el8.src",
"product_id": "jenkins-0:2.277.3.1620393611-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.277.3.1620393611-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.20.0-2.el8.src",
"product": {
"name": "cri-tools-0:1.20.0-2.el8.src",
"product_id": "cri-tools-0:1.20.0-2.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.20.0-2.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"product": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"product_id": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"product": {
"name": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"product_id": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift@4.7.0-202105111743.p0.git.75370d3.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"product": {
"name": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"product_id": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible@4.7.0-202105111743.p0.git.e1b19c2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"product": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"product_id": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202105111743.p0.git.95881af.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.20.0-2.el7.src",
"product": {
"name": "cri-tools-0:1.20.0-2.el7.src",
"product_id": "cri-tools-0:1.20.0-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.20.0-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"product": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"product_id": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.20.2-11.rhaos4.7.git704b03d.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"product": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"product_id": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.0-95.rhaos4.8.gitcd80260.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product": {
"name": "openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_id": "openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-api@16.0.4-0.20210510131210.6787142.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product": {
"name": "openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_id": "openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-common@16.0.4-0.20210510131210.6787142.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product": {
"name": "openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_id": "openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-conductor@16.0.4-0.20210510131210.6787142.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product": {
"name": "python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_id": "python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-ironic-tests@16.0.4-0.20210510131210.6787142.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product": {
"name": "openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_id": "openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-cni@4.7.0-202105111743.p0.git.36c2cdd.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product": {
"name": "openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_id": "openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-common@4.7.0-202105111743.p0.git.36c2cdd.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product": {
"name": "openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_id": "openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-controller@4.7.0-202105111743.p0.git.36c2cdd.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product": {
"name": "python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_id": "python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-kuryr-kubernetes@4.7.0-202105111743.p0.git.36c2cdd.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.277.3.1620393611-1.el8.noarch",
"product": {
"name": "jenkins-0:2.277.3.1620393611-1.el8.noarch",
"product_id": "jenkins-0:2.277.3.1620393611-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.277.3.1620393611-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"product": {
"name": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"product_id": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible@4.7.0-202105111743.p0.git.e1b19c2.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"product": {
"name": "openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"product_id": "openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible-test@4.7.0-202105111743.p0.git.e1b19c2.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"product": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"product_id": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202105111743.p0.git.39cfc66.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_id": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product": {
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_id": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product": {
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_id": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product": {
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_id": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product": {
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_id": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"product": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"product_id": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202105111743.p0.git.95881af.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"product_id": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.7.0-202105111743.p0.git.95881af.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"product": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"product_id": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202105111743.p0.git.75370d3.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product_id": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.20.2-11.rhaos4.7.git704b03d.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product": {
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product_id": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.2-11.rhaos4.7.git704b03d.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product_id": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-11.rhaos4.7.git704b03d.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.20.0-2.el8.x86_64",
"product": {
"name": "cri-tools-0:1.20.0-2.el8.x86_64",
"product_id": "cri-tools-0:1.20.0-2.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.20.0-2.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"product": {
"name": "cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"product_id": "cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.20.0-2.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"product": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"product_id": "cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.20.0-2.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product_id": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product": {
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product_id": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product_id": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"product": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"product_id": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202105111743.p0.git.75370d3.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"product": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"product_id": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202105111743.p0.git.95881af.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"product_id": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.7.0-202105111743.p0.git.95881af.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.20.0-2.el7.x86_64",
"product": {
"name": "cri-tools-0:1.20.0-2.el7.x86_64",
"product_id": "cri-tools-0:1.20.0-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.20.0-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"product": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"product_id": "cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.20.0-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"product": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"product_id": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.20.2-11.rhaos4.7.git704b03d.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"product": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"product_id": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-11.rhaos4.7.git704b03d.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"product": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"product_id": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.0-95.rhaos4.8.gitcd80260.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"product": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"product_id": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.0.0-95.rhaos4.8.gitcd80260.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"product": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"product_id": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202105111743.p0.git.39cfc66.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_id": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product": {
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_id": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product": {
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_id": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product": {
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_id": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product": {
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_id": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"product": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"product_id": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202105111743.p0.git.95881af.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"product": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"product_id": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202105111743.p0.git.75370d3.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product_id": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.20.2-11.rhaos4.7.git704b03d.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product": {
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product_id": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.2-11.rhaos4.7.git704b03d.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product_id": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-11.rhaos4.7.git704b03d.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.20.0-2.el8.ppc64le",
"product": {
"name": "cri-tools-0:1.20.0-2.el8.ppc64le",
"product_id": "cri-tools-0:1.20.0-2.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.20.0-2.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"product": {
"name": "cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"product_id": "cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.20.0-2.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"product": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"product_id": "cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.20.0-2.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product_id": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product": {
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product_id": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product_id": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"product": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"product_id": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202105111743.p0.git.39cfc66.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_id": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product": {
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_id": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product": {
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_id": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product": {
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_id": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product": {
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_id": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.9.0-3.rhaos4.7.git1d56dc8.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"product": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"product_id": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202105111743.p0.git.95881af.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"product": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"product_id": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202105111743.p0.git.75370d3.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product_id": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.20.2-11.rhaos4.7.git704b03d.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product": {
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product_id": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.2-11.rhaos4.7.git704b03d.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product_id": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-11.rhaos4.7.git704b03d.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.20.0-2.el8.s390x",
"product": {
"name": "cri-tools-0:1.20.0-2.el8.s390x",
"product_id": "cri-tools-0:1.20.0-2.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.20.0-2.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"product": {
"name": "cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"product_id": "cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.20.0-2.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"product": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"product_id": "cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.20.0-2.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product_id": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product": {
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product_id": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product_id": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.0.0-95.rhaos4.8.gitcd80260.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src"
},
"product_reference": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64"
},
"product_reference": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64"
},
"product_reference": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.20.0-2.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src"
},
"product_reference": "cri-tools-0:1.20.0-2.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.20.0-2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64"
},
"product_reference": "cri-tools-0:1.20.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64"
},
"product_reference": "cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src"
},
"product_reference": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch"
},
"product_reference": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src"
},
"product_reference": "openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch"
},
"product_reference": "openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src"
},
"product_reference": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64"
},
"product_reference": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64"
},
"product_reference": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src"
},
"product_reference": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64"
},
"product_reference": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64"
},
"product_reference": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le"
},
"product_reference": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x"
},
"product_reference": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src"
},
"product_reference": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64"
},
"product_reference": "atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le"
},
"product_reference": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x"
},
"product_reference": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src"
},
"product_reference": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64"
},
"product_reference": "cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le"
},
"product_reference": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x"
},
"product_reference": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64"
},
"product_reference": "cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le"
},
"product_reference": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x"
},
"product_reference": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64"
},
"product_reference": "cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.20.0-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le"
},
"product_reference": "cri-tools-0:1.20.0-2.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.20.0-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x"
},
"product_reference": "cri-tools-0:1.20.0-2.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.20.0-2.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src"
},
"product_reference": "cri-tools-0:1.20.0-2.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.20.0-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64"
},
"product_reference": "cri-tools-0:1.20.0-2.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le"
},
"product_reference": "cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x"
},
"product_reference": "cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.20.0-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64"
},
"product_reference": "cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.20.0-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le"
},
"product_reference": "cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.20.0-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x"
},
"product_reference": "cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.20.0-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64"
},
"product_reference": "cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le"
},
"product_reference": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x"
},
"product_reference": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src"
},
"product_reference": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64"
},
"product_reference": "ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le"
},
"product_reference": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x"
},
"product_reference": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64"
},
"product_reference": "ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le"
},
"product_reference": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x"
},
"product_reference": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64"
},
"product_reference": "ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le"
},
"product_reference": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x"
},
"product_reference": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64"
},
"product_reference": "ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le"
},
"product_reference": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x"
},
"product_reference": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64"
},
"product_reference": "ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.277.3.1620393611-1.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch"
},
"product_reference": "jenkins-0:2.277.3.1620393611-1.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.277.3.1620393611-1.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src"
},
"product_reference": "jenkins-0:2.277.3.1620393611-1.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src"
},
"product_reference": "openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le"
},
"product_reference": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x"
},
"product_reference": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src"
},
"product_reference": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64"
},
"product_reference": "openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le"
},
"product_reference": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x"
},
"product_reference": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64"
},
"product_reference": "openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src"
},
"product_reference": "openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
},
"product_reference": "openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
},
"product_reference": "openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
},
"product_reference": "openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src"
},
"product_reference": "openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch"
},
"product_reference": "openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch"
},
"product_reference": "openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch"
},
"product_reference": "openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch"
},
"product_reference": "python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
},
"product_reference": "python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le"
},
"product_reference": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x"
},
"product_reference": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src"
},
"product_reference": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
},
"product_reference": "runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le"
},
"product_reference": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x"
},
"product_reference": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
},
"product_reference": "runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le"
},
"product_reference": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x"
},
"product_reference": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
"product_id": "8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
},
"product_reference": "runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-28362",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2020-11-12T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1897635"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the math/big package of Go\u0027s standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: math/big: panic during recursive division of very large numbers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "OpenShift ServiceMesh (OSSM) 1.1 is Out Of Support Scope (OOSS) for Moderate and Low impact vulnerabilities because it is now in the Maintenance Phase of the support.\nOpenshift Virtualization 1 (formerly Container Native Virtualization) is Out Of Support Scope (OOSS) for Moderate and Low impact vulnerabilities.\n\nRed Hat Gluster Storage 3 shipped multi-cloud-object-gateway-cli and noobaa-operator container as a technical preview and is not currently planned to be addressed in future updates.\n\nOpenShift Container Platform (OCP) 4.5 and earlier are built with Go versions earlier than 1.14, which are not affected by this vulnerability. OCP 4.6 is built with Go 1.15 and is affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-28362"
},
{
"category": "external",
"summary": "RHBZ#1897635",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1897635"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-28362",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28362"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-28362",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28362"
}
],
"release_date": "2020-11-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-19T15:03:37+00:00",
"details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1551"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: math/big: panic during recursive division of very large numbers"
},
{
"cve": "CVE-2021-3114",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2021-01-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1918750"
}
],
"notes": [
{
"category": "description",
"text": "A flaw detected in golang: crypto/elliptic, in which P-224 keys as generated can return incorrect inputs, reducing the strength of the cryptography. The highest threat from this vulnerability is confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/elliptic: incorrect operations on the P-224 curve",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "OpenShift ServiceMesh (OSSM) 1.1 is Out Of Support Scope (OOSS) for Moderate and Low impact vulnerabilities because it is now in the Maintenance Phase of the support.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-3114"
},
{
"category": "external",
"summary": "RHBZ#1918750",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918750"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-3114",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3114"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/mperVMGa98w",
"url": "https://groups.google.com/g/golang-announce/c/mperVMGa98w"
}
],
"release_date": "2021-01-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-19T15:03:37+00:00",
"details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1551"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: crypto/elliptic: incorrect operations on the P-224 curve"
},
{
"cve": "CVE-2021-21639",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2021-04-07T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1947102"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. Due to lack of validation of type of object created after loading the data submitted to the config.xml REST API endpoint of a node, an attackers with Computer/Configure permission are able to replace a node with one of a different type.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: lack of type validation in agent related REST API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-21639"
},
{
"category": "external",
"summary": "RHBZ#1947102",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1947102"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-21639",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-21639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21639"
}
],
"release_date": "2021-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-19T15:03:37+00:00",
"details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1551"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jenkins: lack of type validation in agent related REST API"
},
{
"cve": "CVE-2021-21640",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2021-04-07T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1947105"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. Due to lack of validation of the newly created view name, an attackers with View/Create permission are allowed to create views with invalid or already-used names.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: view name validation bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-21640"
},
{
"category": "external",
"summary": "RHBZ#1947105",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1947105"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-21640",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21640"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-21640",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21640"
}
],
"release_date": "2021-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-19T15:03:37+00:00",
"details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1551"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jenkins: view name validation bypass"
},
{
"cve": "CVE-2021-28163",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945710"
}
],
"notes": [
{
"category": "description",
"text": "If the ${jetty.base} directory or the ${jetty.base}/webapps directory is a symlink the contents of the ${jetty.base}/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Symlink directory exposes webapp directory contents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Container Platform (OCP), the hive/presto/hadoop components that comprise the OCP metering stack, ship the vulnerable version of jetty.\nSince the release of OCP 4.6, the metering product has been deprecated [1], hence the affected components are marked as wontfix.\nThis may be fixed in the future.\n\n[1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated\n\nRed Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.\n\nRed Hat CodeReady Studio 12 is not affected by this vulnerability because it does not ship a vulnerable version of jetty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28163"
},
{
"category": "external",
"summary": "RHBZ#1945710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945710"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28163"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28163",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28163"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-19T15:03:37+00:00",
"details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1551"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Symlink directory exposes webapp directory contents"
},
{
"cve": "CVE-2021-28165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945714"
}
],
"notes": [
{
"category": "description",
"text": "When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing high CPU resources utilization. The highest threat from this vulnerability is to service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Resource exhaustion when receiving an invalid large TLS frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Container Platform (OCP), the hive/presto/hadoop components that comprise the OCP metering stack, ship the vulnerable version of jetty.\nSince the release of OCP 4.6, the metering product has been deprecated [1], hence the affected components are marked as wontfix.\nThis may be fixed in the future.\n\n[1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated\n\nRed Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28165"
},
{
"category": "external",
"summary": "RHBZ#1945714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28165",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-19T15:03:37+00:00",
"details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1551"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.src",
"7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.src",
"7Server-RH7-RHOSE-4.7:cri-tools-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202105111743.p0.git.e1b19c2.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202105111743.p0.git.e1b19c2.el7.noarch",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.src",
"7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el7.x86_64",
"7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.src",
"7Server-RH7-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"7Server-RH7-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el7.x86_64",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.ppc64le",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.s390x",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.src",
"8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202105111743.p0.git.39cfc66.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.src",
"8Base-RHOSE-4.7:cri-o-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.ppc64le",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.s390x",
"8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-11.rhaos4.7.git704b03d.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.src",
"8Base-RHOSE-4.7:cri-tools-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debuginfo-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.ppc64le",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.s390x",
"8Base-RHOSE-4.7:cri-tools-debugsource-0:1.20.0-2.el8.x86_64",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.src",
"8Base-RHOSE-4.7:ignition-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-debugsource-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.ppc64le",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.s390x",
"8Base-RHOSE-4.7:ignition-validate-debuginfo-0:2.9.0-3.rhaos4.7.git1d56dc8.el8.x86_64",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.noarch",
"8Base-RHOSE-4.7:jenkins-0:2.277.3.1620393611-1.el8.src",
"8Base-RHOSE-4.7:openshift-0:4.7.0-202105111743.p0.git.75370d3.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.s390x",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.src",
"8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202105111743.p0.git.95881af.el8.x86_64",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.ppc64le",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.s390x",
"8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202105111743.p0.git.75370d3.el8.x86_64",
"8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202105111743.p0.git.36c2cdd.el8.src",
"8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-1:16.0.4-0.20210510131210.6787142.el8.src",
"8Base-RHOSE-4.7:openstack-ironic-api-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-common-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:openstack-ironic-conductor-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-ironic-tests-1:16.0.4-0.20210510131210.6787142.el8.noarch",
"8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202105111743.p0.git.36c2cdd.el8.noarch",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.src",
"8Base-RHOSE-4.7:runc-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debuginfo-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.ppc64le",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.s390x",
"8Base-RHOSE-4.7:runc-debugsource-0:1.0.0-95.rhaos4.8.gitcd80260.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Resource exhaustion when receiving an invalid large TLS frame"
}
]
}
RHSA-2021:1560
Vulnerability from csaf_redhat - Published: 2021-05-13 15:15 - Updated: 2026-05-14 22:31Summary
Red Hat Security Advisory: Red Hat AMQ Streams 1.6.4 release and security update
Severity
Moderate
Notes
Topic: Red Hat AMQ Streams 1.6.4 is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat AMQ Streams, based on the Apache Kafka project, offers a distributed backbone that allows microservices and other applications to share data with extremely high throughput and extremely low latency.
This release of Red Hat AMQ Streams 1.6.4 serves as a replacement for Red Hat AMQ Streams 1.6.2, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.
Security Fix(es):
* jetty-server: jetty: Symlink directory exposes webapp directory contents (CVE-2021-28163)
* jetty-server: jetty: Ambiguous paths can access WEB-INF (CVE-2021-28164)
* jetty-server: jetty: Resource exhaustion when receiving an invalid large TLS frame (CVE-2021-28165)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
If the ${jetty.base} directory or the ${jetty.base}/webapps directory is a symlink the contents of the ${jetty.base}/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat AMQ Streams 1.6.4
Red Hat / Red Hat JBoss AMQ
|
cpe:/a:redhat:amq_streams:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
In Jetty the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can use this vulnerability to reveal sensitive information regarding the implementation of a web application.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat AMQ Streams 1.6.4
Red Hat / Red Hat JBoss AMQ
|
cpe:/a:redhat:amq_streams:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing high CPU resources utilization. The highest threat from this vulnerability is to service availability.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat AMQ Streams 1.6.4
Red Hat / Red Hat JBoss AMQ
|
cpe:/a:redhat:amq_streams:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
23 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AMQ Streams 1.6.4 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat AMQ Streams, based on the Apache Kafka project, offers a distributed backbone that allows microservices and other applications to share data with extremely high throughput and extremely low latency. \n\nThis release of Red Hat AMQ Streams 1.6.4 serves as a replacement for Red Hat AMQ Streams 1.6.2, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.\n\nSecurity Fix(es):\n\n* jetty-server: jetty: Symlink directory exposes webapp directory contents (CVE-2021-28163)\n\n* jetty-server: jetty: Ambiguous paths can access WEB-INF (CVE-2021-28164)\n\n* jetty-server: jetty: Resource exhaustion when receiving an invalid large TLS frame (CVE-2021-28165)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:1560",
"url": "https://access.redhat.com/errata/RHSA-2021:1560"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.streams\u0026version=1.6.4",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.streams\u0026version=1.6.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_amq/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_amq/"
},
{
"category": "external",
"summary": "1945710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945710"
},
{
"category": "external",
"summary": "1945712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945712"
},
{
"category": "external",
"summary": "1945714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1560.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AMQ Streams 1.6.4 release and security update",
"tracking": {
"current_release_date": "2026-05-14T22:31:08+00:00",
"generator": {
"date": "2026-05-14T22:31:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2021:1560",
"initial_release_date": "2021-05-13T15:15:57+00:00",
"revision_history": [
{
"date": "2021-05-13T15:15:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-05-13T15:15:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:31:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Streams 1.6.4",
"product": {
"name": "Red Hat AMQ Streams 1.6.4",
"product_id": "Red Hat AMQ Streams 1.6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_streams:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss AMQ"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-28163",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945710"
}
],
"notes": [
{
"category": "description",
"text": "If the ${jetty.base} directory or the ${jetty.base}/webapps directory is a symlink the contents of the ${jetty.base}/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Symlink directory exposes webapp directory contents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Container Platform (OCP), the hive/presto/hadoop components that comprise the OCP metering stack, ship the vulnerable version of jetty.\nSince the release of OCP 4.6, the metering product has been deprecated [1], hence the affected components are marked as wontfix.\nThis may be fixed in the future.\n\n[1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated\n\nRed Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.\n\nRed Hat CodeReady Studio 12 is not affected by this vulnerability because it does not ship a vulnerable version of jetty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AMQ Streams 1.6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28163"
},
{
"category": "external",
"summary": "RHBZ#1945710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945710"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28163"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28163",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28163"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-13T15:15:57+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat AMQ Streams 1.6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1560"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AMQ Streams 1.6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Symlink directory exposes webapp directory contents"
},
{
"cve": "CVE-2021-28164",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945712"
}
],
"notes": [
{
"category": "description",
"text": "In Jetty the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can use this vulnerability to reveal sensitive information regarding the implementation of a web application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Ambiguous paths can access WEB-INF",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.\n\nRed Hat CodeReady Studio 12 is not affected by this vulnerability because it does not ship a vulnerable version of jetty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AMQ Streams 1.6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28164"
},
{
"category": "external",
"summary": "RHBZ#1945712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28164",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28164"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28164",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28164"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-v7ff-8wcx-gmc5",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-v7ff-8wcx-gmc5"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-13T15:15:57+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat AMQ Streams 1.6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1560"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AMQ Streams 1.6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Ambiguous paths can access WEB-INF"
},
{
"cve": "CVE-2021-28165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2021-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1945714"
}
],
"notes": [
{
"category": "description",
"text": "When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large (greater than 17408) TLS frame that is incorrectly handled, causing high CPU resources utilization. The highest threat from this vulnerability is to service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Resource exhaustion when receiving an invalid large TLS frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Container Platform (OCP), the hive/presto/hadoop components that comprise the OCP metering stack, ship the vulnerable version of jetty.\nSince the release of OCP 4.6, the metering product has been deprecated [1], hence the affected components are marked as wontfix.\nThis may be fixed in the future.\n\n[1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated\n\nRed Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AMQ Streams 1.6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-28165"
},
{
"category": "external",
"summary": "RHBZ#1945714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-28165",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28165"
},
{
"category": "external",
"summary": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
"url": "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w"
}
],
"release_date": "2021-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-13T15:15:57+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat AMQ Streams 1.6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1560"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AMQ Streams 1.6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Resource exhaustion when receiving an invalid large TLS frame"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…