Skip to content

Commit

Permalink
Jetty upgrade to 9.4.30.v20200611 version
Browse files Browse the repository at this point in the history
As the  max request header size and response heder size are configurable in airlift, CVE-2019-17638 (https://nvd.nist.gov/vuln/detail/CVE-2019-17638) might affect it.
Jetty version update to 9.4.30.v20200611 will fix the issue in lights of CVE-2019-17638 and jetty/jetty.project#4936.
  • Loading branch information
ShashwatArghode authored and aweisberg committed Oct 23, 2021
1 parent 76fc959 commit 4878358
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@

<dep.airlift.version>0.202-SNAPSHOT</dep.airlift.version>
<dep.packaging.version>${dep.airlift.version}</dep.packaging.version>
<dep.jetty.version>9.4.27.v20200227</dep.jetty.version>
<dep.jetty.version>9.4.30.v20200611</dep.jetty.version>
<dep.jersey.version>2.26</dep.jersey.version>
<dep.drift.version>1.31</dep.drift.version>
</properties>
Expand Down

0 comments on commit 4878358

Please sign in to comment.