Fedora 27 : jetty (2018-93a507fd0f)

Update to upstream version 9.4.11. Fixes CVE-2017-7656, CVE-2017-7657, CVE-2017-7658, CVE-2018-12538. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

Eclipse Jetty Server Fake Pipeline Request Security Bypass Vulnerability - Windows

Eclipse Jetty Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty Server Fake Pipeline Request Security Bypass Vulnerability - Linux

Eclipse Jetty Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

CVE-2017-7658

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x all non HTTP/1.x configurations, and 9.4.x all HTTP/1.x configurations, when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was...

at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2017-7658 Source advisory: MEND:CVE-2017-7658...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +1500 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (>=9.3.0.v20150612, <=9.3.23.v20180228)

org.eclipse.jetty:jetty-server MAVEN version =9.3.0.v20150612, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744...