{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Medium" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"jetty security update", "category":"general", "title":"Synopsis" }, { "text":"An update for jetty is now available for openEuler-24.03-LTS", "category":"general", "title":"Summary" }, { "text":"%global desc \\ Jetty is a 100% Java HTTP Server and Servlet Container. This means that you\\ do not need to configure and run a separate web server (like Apache) in order\\ to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\\ featured web server for static and dynamic content. Unlike separate\\ server/container solutions, this means that your web server and web\\ application run in the same process, without interconnection overheads\\ and complications. Furthermore, as a pure java component, Jetty can be simply\\ included in your application for demonstration, distribution or deployment.\\ Jetty is available on all Java supported platforms. \\ %global extdesc \\\\ \\ This package contains\n\nSecurity Fix(es):\n\nJetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory).(CVE-2023-26048)\n\nEclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.\n(CVE-2023-36479)\n\nJetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario.(CVE-2023-40167)", "category":"general", "title":"Description" }, { "text":"An update for jetty is now available for openEuler-24.03-LTS.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Medium", "category":"general", "title":"Severity" }, { "text":"jetty", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2024-2298", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2298" }, { "summary":"CVE-2023-26048", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-26048&packageName=jetty" }, { "summary":"CVE-2023-36479", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-36479&packageName=jetty" }, { "summary":"CVE-2023-40167", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-40167&packageName=jetty" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26048" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36479" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167" }, { "summary":"openEuler-SA-2024-2298 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2024/csaf-openeuler-sa-2024-2298.json" } ], "title":"An update for jetty is now available for openEuler-24.03-LTS", "tracking":{ "initial_release_date":"2024-10-25T20:50:17+08:00", "revision_history":[ { "date":"2024-10-25T20:50:17+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2024-10-25T20:50:17+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2024-10-25T20:50:17+08:00", "id":"openEuler-SA-2024-2298", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"openEuler-24.03-LTS", "name":"openEuler-24.03-LTS" }, "name":"openEuler-24.03-LTS", "category":"product_version" } ], "category":"product_name" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-9.4.16-7.oe2403.src.rpm", "name":"jetty-9.4.16-7.oe2403.src.rpm" }, "name":"jetty-9.4.16-7.oe2403.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-alpn-client-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-alpn-client-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-alpn-client-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-alpn-server-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-alpn-server-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-alpn-server-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-annotations-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-annotations-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-annotations-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-ant-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-ant-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-ant-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-cdi-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-cdi-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-cdi-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-client-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-client-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-client-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-continuation-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-continuation-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-continuation-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-deploy-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-deploy-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-deploy-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-fcgi-client-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-fcgi-client-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-fcgi-client-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-fcgi-server-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-fcgi-server-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-fcgi-server-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-http-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-http-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-http-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-http-spi-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-http-spi-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-http-spi-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-http2-client-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-http2-client-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-http2-client-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-http2-common-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-http2-common-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-http2-common-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-http2-hpack-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-http2-hpack-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-http2-hpack-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-http2-server-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-http2-server-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-http2-server-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-httpservice-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-httpservice-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-httpservice-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-infinispan-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-infinispan-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-infinispan-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-io-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-io-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-io-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-jaas-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-jaas-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-jaas-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-jaspi-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-jaspi-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-jaspi-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-javadoc-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-javadoc-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-javadoc-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-jmx-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-jmx-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-jmx-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-jndi-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-jndi-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-jndi-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-jsp-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-jsp-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-jsp-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-jstl-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-jstl-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-jstl-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-maven-plugin-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-maven-plugin-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-maven-plugin-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-nosql-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-nosql-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-nosql-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-osgi-alpn-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-osgi-alpn-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-osgi-alpn-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-osgi-boot-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-osgi-boot-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-osgi-boot-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-plus-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-plus-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-plus-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-project-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-project-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-project-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-proxy-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-proxy-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-proxy-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-quickstart-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-quickstart-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-quickstart-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-rewrite-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-rewrite-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-rewrite-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-security-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-security-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-security-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-server-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-server-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-server-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-servlet-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-servlet-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-servlet-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-servlets-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-servlets-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-servlets-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-spring-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-spring-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-spring-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-start-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-start-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-start-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-unixsocket-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-unixsocket-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-unixsocket-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-util-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-util-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-util-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-util-ajax-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-util-ajax-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-util-ajax-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-webapp-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-webapp-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-webapp-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-websocket-api-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-websocket-api-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-websocket-api-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-websocket-client-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-websocket-client-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-websocket-client-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-websocket-common-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-websocket-common-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-websocket-common-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-websocket-server-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-websocket-server-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-websocket-server-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-websocket-servlet-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-websocket-servlet-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-websocket-servlet-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"jetty-xml-9.4.16-7.oe2403.noarch.rpm", "name":"jetty-xml-9.4.16-7.oe2403.noarch.rpm" }, "name":"jetty-xml-9.4.16-7.oe2403.noarch.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-9.4.16-7.oe2403.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "name":"jetty-9.4.16-7.oe2403.src as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "name":"jetty-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-alpn-client-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "name":"jetty-alpn-client-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-alpn-server-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "name":"jetty-alpn-server-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-annotations-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "name":"jetty-annotations-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-ant-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "name":"jetty-ant-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-cdi-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "name":"jetty-cdi-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-client-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "name":"jetty-client-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-continuation-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "name":"jetty-continuation-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-deploy-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "name":"jetty-deploy-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-fcgi-client-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "name":"jetty-fcgi-client-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-fcgi-server-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "name":"jetty-fcgi-server-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-http-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "name":"jetty-http-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-http-spi-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "name":"jetty-http-spi-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-http2-client-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "name":"jetty-http2-client-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-http2-common-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "name":"jetty-http2-common-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-http2-hpack-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "name":"jetty-http2-hpack-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "name":"jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-http2-server-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "name":"jetty-http2-server-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-httpservice-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "name":"jetty-httpservice-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-infinispan-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "name":"jetty-infinispan-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-io-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "name":"jetty-io-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-jaas-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "name":"jetty-jaas-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-jaspi-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "name":"jetty-jaspi-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-javadoc-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "name":"jetty-javadoc-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "name":"jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "name":"jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-jmx-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "name":"jetty-jmx-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-jndi-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "name":"jetty-jndi-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-jsp-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "name":"jetty-jsp-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "name":"jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-jstl-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "name":"jetty-jstl-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-maven-plugin-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "name":"jetty-maven-plugin-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-nosql-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "name":"jetty-nosql-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-osgi-alpn-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "name":"jetty-osgi-alpn-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-osgi-boot-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "name":"jetty-osgi-boot-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "name":"jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "name":"jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-plus-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "name":"jetty-plus-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-project-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "name":"jetty-project-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-proxy-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "name":"jetty-proxy-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-quickstart-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "name":"jetty-quickstart-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-rewrite-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "name":"jetty-rewrite-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-security-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "name":"jetty-security-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-server-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "name":"jetty-server-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-servlet-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "name":"jetty-servlet-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-servlets-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "name":"jetty-servlets-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-spring-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "name":"jetty-spring-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-start-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "name":"jetty-start-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-unixsocket-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "name":"jetty-unixsocket-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-util-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "name":"jetty-util-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-util-ajax-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "name":"jetty-util-ajax-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-webapp-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "name":"jetty-webapp-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-websocket-api-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "name":"jetty-websocket-api-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-websocket-client-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "name":"jetty-websocket-client-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-websocket-common-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "name":"jetty-websocket-common-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-websocket-server-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "name":"jetty-websocket-server-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-websocket-servlet-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "name":"jetty-websocket-servlet-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"jetty-xml-9.4.16-7.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch", "name":"jetty-xml-9.4.16-7.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2023-26048", "notes":[ { "text":"Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory).", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ], "details":"jetty security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2298" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2023-26048" }, { "cve":"CVE-2023-36479", "notes":[ { "text":"Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.\n", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ], "details":"jetty security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2298" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2023-36479" }, { "cve":"CVE-2023-40167", "notes":[ { "text":"Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ], "details":"jetty security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2298" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.src", "openEuler-24.03-LTS:jetty-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-alpn-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-annotations-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-ant-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-cdi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-continuation-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-deploy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-fcgi-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http-spi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-hpack-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-http-client-transport-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-http2-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-httpservice-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-infinispan-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-io-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaas-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jaspi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javadoc-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-client-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-javax-websocket-server-impl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jmx-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jndi-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jspc-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-jstl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-maven-plugin-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-nosql-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-alpn-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-jsp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-osgi-boot-warurl-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-plus-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-project-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-proxy-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-quickstart-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-rewrite-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-security-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-servlets-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-spring-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-start-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-unixsocket-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-util-ajax-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-webapp-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-api-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-client-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-common-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-server-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-websocket-servlet-9.4.16-7.oe2403.noarch", "openEuler-24.03-LTS:jetty-xml-9.4.16-7.oe2403.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2023-40167" } ] }