You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@karaf.apache.org by "Jean-Baptiste Onofré (Jira)" <ji...@apache.org> on 2024/12/16 10:17:00 UTC

[jira] [Resolved] (KARAF-7887) Update Eclipse Jetty to solve CVE-2024-8184, CVE-2024-6762, CVE-2024-6763

     [ https://issues.apache.org/jira/browse/KARAF-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jean-Baptiste Onofré resolved KARAF-7887.
-----------------------------------------
    Target Version/s:   (was: 4.5.0, 4.4.7)
          Resolution: Duplicate

> Update Eclipse Jetty to solve CVE-2024-8184, CVE-2024-6762, CVE-2024-6763
> -------------------------------------------------------------------------
>
>                 Key: KARAF-7887
>                 URL: https://issues.apache.org/jira/browse/KARAF-7887
>             Project: Karaf
>          Issue Type: Dependency upgrade
>          Components: karaf
>    Affects Versions: 4.4.6
>            Reporter: Prabhakaran Rajendran
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>              Labels: security
>
> Eclipse Jetty till 9.4.54 is affected by this below vulnerabilities. To solve it, upgrade to 9.4.56 should be used. Hence this 3pp update is needed in Karaf.
>  
> CVE-2024-8184
> CVE-2024-6762
> CVE-2024-6763



--
This message was sent by Atlassian Jira
(v8.20.10#820010)