Oval Definition:	oval:org.opensuse.security:def:74730
Revision Date: 2021-08-25 Version: 1 Title: Security update for jetty-minimal (Moderate) Description: This update for jetty-minimal fixes the following issues: - Update to version 9.4.43.v20210629 - CVE-2021-34429: URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. (bsc#1188438) Family: unix Class: patch Status: Reference(s): 1056061 1171186 1188438 CVE-2017-13082 CVE-2019-9494 CVE-2019-9495 CVE-2019-9496 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 CVE-2020-12387 CVE-2020-12392 CVE-2020-12393 CVE-2020-12395 CVE-2020-12397 CVE-2020-6831 CVE-2021-34429 openSUSE-SU-2020:0222-1 openSUSE-SU-2020:0643-1 SUSE-SU-2021:2838-1 Platform(s): openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 Product(s): Definition Synopsis openSUSE Leap 15.1 is installed AND hostapd-2.9-lp151.4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed AND Package Information jetty-http-9.4.43-3.12.2 is installed OR jetty-io-9.4.43-3.12.2 is installed OR jetty-security-9.4.43-3.12.2 is installed OR jetty-server-9.4.43-3.12.2 is installed OR jetty-servlet-9.4.43-3.12.2 is installed OR jetty-util-9.4.43-3.12.2 is installed OR jetty-util-ajax-9.4.43-3.12.2 is installed
BACK