[
https://issues.apache.org/jira/browse/ZOOKEEPER-4700?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andor Molnar resolved ZOOKEEPER-4700.
-------------------------------------
Resolution: Fixed
Issue resolved by pull request 2007
[https://github.com/apache/zookeeper/pull/2007]
> Update Jetty for fixing CVE-2023-26048 and CVE-2023-26049
> ---------------------------------------------------------
>
> Key: ZOOKEEPER-4700
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4700
> Project: ZooKeeper
> Issue Type: Task
> Affects Versions: 3.8.1
> Reporter: Beltran
> Assignee: Szucs Villo
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.9.0, 3.8.2
>
> Time Spent: 1h 50m
> Remaining Estimate: 0h
>
> The Zookeeper latest version (v3.8.1) includes
> jetty-server-9.4.49.v20220914.jar that includes 2 vulnerabilities reported by
> the scanners: CVE-2023-26048 and CVE-2023-26049.
> The goal is to upgrade jetty to 9.4.51. This dependency was already upgraded
> in Kafka KAFKA-14983.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
