You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@karaf.apache.org by "Karthick (Jira)" <ji...@apache.org> on 2023/05/04 11:15:00 UTC

[jira] [Created] (KARAF-7692) Upgrade Jetty to 9.4.51

Karthick created KARAF-7692:
-------------------------------

             Summary: Upgrade Jetty to 9.4.51
                 Key: KARAF-7692
                 URL: https://issues.apache.org/jira/browse/KARAF-7692
             Project: Karaf
          Issue Type: Dependency upgrade
          Components: karaf
    Affects Versions: 4.3.7, 4.4.1
            Reporter: Karthick
            Assignee: Jean-Baptiste Onofré
             Fix For: 4.4.3, 4.3.9


The latest version of Apache Karaf 4.3.8 and 4.4.2 uses Apache MINA SSHD 2.9.1 which is impacted by critical vulnerability cve-2022-45047.

 

Please stepup this library to > 2.9.1 to solve this.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)