#47562 java-eclipse-jetty-* packages are vulnerable to CVE-2021-28165, CVE-2021-28164 and CVE-2021-28163 (also probably MANY others, 4y w/o upgrade)

Received: (at 47562-done) by debbugs.gnu.org; 12 Apr 2021 14:41:55 +0000
From debbugs-submit-bounces@debbugs.gnu.org Mon Apr 12 10:41:54 2021
Received: from localhost ([127.0.0.1]:57685 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lVxlC-000111-N4
	for submit@debbugs.gnu.org; Mon, 12 Apr 2021 10:41:54 -0400
Received: from lepiller.eu ([89.234.186.109]:34044)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <julien@lepiller.eu>) id 1lVxlA-00010n-8d
 for 47562-done@debbugs.gnu.org; Mon, 12 Apr 2021 10:41:53 -0400
Received: from lepiller.eu (localhost [127.0.0.1])
 by lepiller.eu (OpenSMTPD) with ESMTP id 89b2e3eb
 for <47562-done@debbugs.gnu.org>;
 Mon, 12 Apr 2021 14:41:50 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=lepiller.eu; h=date:from
 :to:subject:message-id:mime-version:content-type
 :content-transfer-encoding; s=dkim; bh=q9nTbOSyrhwyfMwHbbnE6RIFA
 ifMBd2Vwgg4NicOz9E=; b=Et2oJgTacXg9jCRnCN6SWGRBcvq6k0DfacotIlX8o
 jG29yo2PblRGP2QWmq8FjGDiBh7SndsWZ+deI2KwmbQCLJPwCoYsGo/N+jldD62o
 x0UbqJ1wAh+SM+xfSisJyzcSc/xaRrLUGIwwClnjMAh8JEO/KL0gdBgh9MYXBDZf
 e9CYE1TFrXUe0rcPz3xPf1/etRWIdxGY5lW0psXVXLtk/2v5E8VVM6D8ufk0bNcn
 uVjkm1ZDgAo6rJ9O23HPopGLi3W2U1wDktrOysDsVc1oCJMhh3KFfN8wSNp8CRxn
 ejoIm8IWldmY0w2ZYRBYrtFFmeKc6aGVylDtQTHl76CzQ==
Received: by lepiller.eu (OpenSMTPD) with ESMTPSA id 79710020
 (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO)
 for <47562-done@debbugs.gnu.org>;
 Mon, 12 Apr 2021 14:41:49 +0000 (UTC)
Date: Mon, 12 Apr 2021 16:41:45 +0200
From: Julien Lepiller <julien@lepiller.eu>
To: 47562-done@debbugs.gnu.org
Subject: Re: java-eclipse-jetty-* packages are vulnerable to CVE-2021-28165,
 CVE-2021-28164 and CVE-2021-28163 (also probably MANY others, 4y w/o
 upgrade)
Message-ID: <20210412164138.6d23eed8@tachikoma.lepiller.eu>
X-Mailer: Claws Mail 3.17.8 (GTK+ 2.24.32; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: 47562-done
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)