Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE: 2020:3922-1 Moderate: Jetty-Minimal Buffer Overflow

suse
Calendar Grey December 22, 2020
Scroller Suse
The SUSE Security Patch tackles a moderate risk in jetty-minimal by resolving a heap overflow vulnerability.
An update that fixes one vulnerability is now available

Summary

This update for jetty-minimal fixes the following issues: - jetty-minimal was upgraded to version 9.4.35.v20201120 - CVE-2020-27218: Fixed an issue where buffer not correctly recycled in Gzip Request inflation (bsc#1179727). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Development Tools 15-SP2: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP2-2020-3922=1 Package List: - SUSE Linux Enterprise Module for Development Tools 15-SP2 (noarch): jetty-http-9.4.35-3.3.4 jetty-io-9.4.35-3.3.4 jetty-security-9.4.35-3.3.4 jetty-server-9.4.35-3.3.4 jetty-servlet-9.4.35-3.3.4

Topics%20covered

Topics Covered

security advisory moderate buffer overflow development tools suse jetty-minimal

References

#1179727

Cross- CVE-2020-27218

Affected Products:

SUSE Linux Enterprise Module for Development Tools 15-SP2

https://www.suse.com/security/cve/CVE-2020-27218.html

https://bugzilla.suse.com/1179727

Announcement ID: SUSE-SU-2020:3922-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow development tools suse jetty-minimal

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.