[
https://issues.apache.org/jira/browse/ZOOKEEPER-4700?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated ZOOKEEPER-4700:
--------------------------------------
Labels: pull-request-available (was: )
> Update Jetty for fixing CVE-2023-26048 and CVE-2023-26049
> ---------------------------------------------------------
>
> Key: ZOOKEEPER-4700
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4700
> Project: ZooKeeper
> Issue Type: Task
> Affects Versions: 3.8.1
> Reporter: Beltran
> Assignee: Szucs Villo
> Priority: Major
> Labels: pull-request-available
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The Zookeeper latest version (v3.8.1) includes
> jetty-server-9.4.49.v20220914.jar that includes 2 vulnerabilities reported by
> the scanners: CVE-2023-26048 and CVE-2023-26049.
> The goal is to upgrade jetty to 9.4.51. This dependency was already upgraded
> in Kafka KAFKA-14983.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
