Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 10: Jetty 5.1.15 Update Essential: Addressing DoS Vulnerability

fedora
Calendar Grey May 26, 2009
Dist Fedora Esm H88
Jetty version 5.1.15 for Fedora 10 incorporates a security patch for CVE-2009-1523, rated as critical, enhancing overall server efficiency.
This bug upgrades jetty to 5.1.15 which addresses CVE-2009-1523

Summary

Jetty is a 100% Java HTTP Server and Servlet Container.

This means that you do not need to configure and run a

separate web server (like Apache) in order to use java,

servlets and JSPs to generate dynamic content. Jetty is

a fully featured web server for static and dynamic content.

Unlike separate server/container solutions, this means

that your web server and web application run in the same

process, without interconnection overheads and complications.

Furthermore, as a pure java component, Jetty can be simply

included in your application for demonstration, distribution

or deployment. Jetty is available on all Java supported

platforms.

Update Information:

This bug upgrades jetty to 5.1.15 which addresses CVE-2009-1523. * Wed Feb 11 2009 Jeff Johnston 5.1.14-1.10 - Rename jettyc back to .jettyrc. - Resolves #485012 * Tue Feb 03 2009 Jeff Johnston 5.1.14-1.9 - Change %%{_sysconfdir}/init.d references to be %%{_initrddir} - Resolves #473585 * Mon Feb 02 2009 Jeff Johnston 5.1.14-1.8 - Fixes for unowned directories.

Topics%20covered

Topics Covered

security advisory critical software update Fedora doS service jetty

Change Log

* Thu May 21 2009 Jeff Johnston 5.1.15-3 - Do not allow directory listings. * Tue May 19 2009 Jeff Johnston 5.1.15-2 - Update OSGI manifest file. * Tue May 19 2009 Jeff Johnston 5.1.15-1 - Upgrade to 5.1.15 source tarball for Fedora. * Wed Apr 22 2009 Jeff Johnston 5.1.14-3 - Add %{libdir} to files list. - Resolves #473585 * Wed Feb 11 2009 Jeff Johnston 5.1.14-1.10 - Rename jettyc back to .jettyrc. - Resolves #485012 * Tue Feb 3 2009 Jeff Johnston 5.1.14-1.9 - Change %{_sysconfdir}/init.d references to be %{_initrddir} * Mon Feb 2 2009 Jeff Johnston 5.1.14-1.8 - Fixes for unowned directories. * Tue Jan 6 2009 Jeff Johnston 5.1.14-1.7 - Patch init.d script to add status operation - Patch unix djetty script so it doesn't issue error messages about /dev/tty and fix various inconsistencies with the init.d script

References


[ 1 ] Bug #499867 - CVE-2009-1523 CVE-2009-1524: multiple vulnerabilities in jetty https://bugzilla.redhat.com/show_bug.cgi?id=499867

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update jetty' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: jetty
Product: Fedora 10
Version: 5.1.15
Release: 3.fc10
URL: Summary : The Jetty Webserver and Servlet Container

Topics%20covered

Topics Covered

security advisory critical software update Fedora doS service jetty

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here