[ZOOKEEPER-4778] Patch jetty, netty, and logback to remove high severity vulnerabilities - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 3.10.0, 3.7.3, 3.8.4, 3.9.2
Component/s: security
Labels:
- pull-request-available

Description

logback-core & logback-classic:

https://nvd.nist.gov/vuln/detail/CVE-2023-6378

netty-codec:

https://nvd.nist.gov/vuln/detail/CVE-2023-44487

jetty-io:

https://nvd.nist.gov/vuln/detail/CVE-2023-36478

Attachments

Issue Links

links to

GitHub Pull Request #2098

GitHub Pull Request #2118

GitHub Pull Request #2124

GitHub Pull Request #2125

GitHub Pull Request #2126

Activity

People

Assignee:: Damien Diederen

Reporter:: Ivgeni

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 16/Dec/23 15:25

Updated:: 09/Feb/24 11:20

Resolved:: 31/Jan/24 08:43

Time Tracking

Estimated:

24h

Remaining:

20h 10m

Logged:

3h 50m