File _patchinfo of Package patchinfo.20474

<patchinfo incident="20474">
  <issue tracker="bnc" id="1188438">VUL-0: CVE-2021-34429: jetty-minimal: URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints</issue>
  <issue tracker="cve" id="2021-34429"/>
  <packager>fstrba</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for jetty-minimal</summary>
  <description>This update for jetty-minimal fixes the following issues:

- Update to version 9.4.43.v20210629
- CVE-2021-34429: URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. (bsc#1188438)
</description>
</patchinfo>
openSUSE Build Service is sponsored by