Security update for jetty-minimal (important)

🗓️ 11 Jul 2021 00:00:00Reported by OpenSuseType

opensuse🔗 lists.opensuse.org👁 124 Views

Security update for jetty-minimal with 4 CVE fixe

Reporter	Title	Published	Views	Family All 300
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.	7 May 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable due to Eclipse Jetty	17 Oct 202213:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	7 Jun 202406:01	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	11 Mar 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to multiple Eclipse Jetty issues	24 Jun 202216:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining (CVE-2021-28165)	1 Feb 202321:57	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
opensuse	15.3	noarch	jetty-annotations-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-annotations
opensuse	15.3	noarch	jetty-client-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-client
opensuse	15.3	noarch	jetty-continuation-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-continuation
opensuse	15.3	noarch	jetty-http-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-http
opensuse	15.3	noarch	jetty-io-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-io
opensuse	15.3	noarch	jetty-jaas-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-jaas
opensuse	15.3	noarch	jetty-javax-websocket-client-impl-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-javax-websocket-client-impl
opensuse	15.3	noarch	jetty-javax-websocket-server-impl-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-javax-websocket-server-impl
opensuse	15.3	noarch	jetty-jmx-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-jmx
opensuse	15.3	noarch	jetty-jndi-9.4.42-3.9.1.noarch.rpm	9.4.42	jetty-jndi

11 Jul 2021 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.82371

jetty-minimal vulnerabilities update version 9.4.42.v20210604 bsc#1187117 cve-2021-28169 bsc#1184367 cve-2021-28165 bsc#1184368 cve-2021-28164 bsc#1184366 cve-2021-28163 opensuse leap 15.3 zypper patch.