Sponsored link
Vyatta –
Linux & Open Source
Alternative to Cisco –
Advanced Routing,
Firewall, VPN, QoS..
Free Download ->
| ||||||||||||||||
Fedora alert FEDORA-2008-6164 (jetty)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-6164 2008-07-06 04:48:43 -------------------------------------------------------------------------------- Name : jetty Product : Fedora 8 Version : 5.1.14 Release : 1jpp.1.fc8 URL : http://jetty.mortbay.org/jetty/ Summary : The Jetty Webserver and Servlet Container Description : Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 4 2008 Jeff Johnston <jjohnstn@redhat.com> 5.1.14-1jpp.1 - Security patch - Resolves #417401, #417411, #417391 - Upgrade to 5.1.14 source tarball for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #417411 - CVE-2007-5615: jetty CRLF injection https://bugzilla.redhat.com/show_bug.cgi?id=417411 [ 2 ] Bug #417401 - CVE-2007-5614: jetty session hijacking issue https://bugzilla.redhat.com/show_bug.cgi?id=417401 [ 3 ] Bug #417391 - CVE-2007-5613: jetty cross site scripting https://bugzilla.redhat.com/show_bug.cgi?id=417391 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update jetty' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann... (Log in to post comments)
|
||||||||||||||||