https://bugzilla.redhat.com/show_bug.cgi?id=1595620
Joshua Mulliken jmullike@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |aboyko@redhat.com, | |drieden@redhat.com, | |krathod@redhat.com, | |pdrozd@redhat.com, | |pjindal@redhat.com, | |sthorger@redhat.com
--- Comment #8 from Joshua Mulliken jmullike@redhat.com --- Adding RHSSO. A vulnerable version of jetty-server was detected in a newly generated BOM:
{ "publisher": "Mort Bay Consulting", "group": "org.eclipse.jetty", "name": "jetty-server", "version": "8.1.17.v20150415", "description": "The core jetty server artifact.", "scope": "required", "hashes": [ { "alg": "MD5", "content": "ea71b707de824a8a3cb9c19b5cfa5678" }, { "alg": "SHA-1", "content": "9e955fc5f9799aef0d1730430c1d7e285b422b11" }, { "alg": "SHA-256", "content": "61b833bf4fb0c4936d53c0073580a76092f7679b3623797b676fa5ca5dd51bb7" }, { "alg": "SHA-384", "content": "a3d76e03aedfd042f2b8d7c61c60fdc87d17ae3d9f7a08b4d6847e108153d2de45de5fbe66816222aa10170313c10ce8" }, { "alg": "SHA-512", "content": "ea653074310d405dc64871b96d04d6fb412b6d305aee2912ff9c4c52bdf98041951d5f10493e858464b6f4efc323d35da1920456098ddc9d00b36f1e9e99ca4f" }, { "alg": "SHA3-256", "content": "320fd51b0ce2f1410304d00c30cebedd744807c47896c92fb82099699e2eb631" }, { "alg": "SHA3-384", "content": "48ad92065fa19508fb88f46cd8983f1c4c5fb527e8c232ed3466c9d931430abbc2b6f1e81d8d0d4634bb2ff736adb547" }, { "alg": "SHA3-512", "content": "0e99dd32d1d5dec3fa4e40f12bb972846b87dece01ef863772b02638de88f7544d2459202ae970e216c3c0c995f6963cb5d526b866cba53203f8da55885f75ea" } ], "licenses": [ { "license": { "id": "Apache-2.0" } }, { "license": { "id": "EPL-1.0" } } ], "purl": "pkg:maven/org.eclipse.jetty/jetty-server@8.1.17.v20150415?type=jar", "externalReferences": [ { "type": "vcs", "url": "http://git.eclipse.org/c/jetty/org.eclipse.jetty.project.git/tree" }, { "type": "website", "url": "http://www.mortbay.com" }, { "type": "distribution", "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Jetty" }, { "type": "mailing-list", "url": "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html" } ], "type": "library", "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@8.1.17.v20150415?type=jar" }
java-sig-commits@lists.fedoraproject.org