[
https://issues.apache.org/jira/browse/ZOOKEEPER-4700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17745170#comment-17745170
]
Anton Stadnikov commented on ZOOKEEPER-4700:
--------------------------------------------
Are there any plans to merge these changes to currently latest stable 3.7.x
branch?
> Update Jetty for fixing CVE-2023-26048 and CVE-2023-26049
> ---------------------------------------------------------
>
> Key: ZOOKEEPER-4700
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4700
> Project: ZooKeeper
> Issue Type: Task
> Affects Versions: 3.8.1
> Reporter: Beltran
> Assignee: Szucs Villo
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.9.0, 3.8.2
>
> Time Spent: 2h 10m
> Remaining Estimate: 0h
>
> The Zookeeper latest version (v3.8.1) includes
> jetty-server-9.4.49.v20220914.jar that includes 2 vulnerabilities reported by
> the scanners: CVE-2023-26048 and CVE-2023-26049.
> The goal is to upgrade jetty to 9.4.51. This dependency was already upgraded
> in Kafka KAFKA-14983.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
