Package: release.debian.org Severity: normal User: release.debian.org@packages.debian.org Usertags: unblock X-Debbugs-Cc: apo@debian.org Please unblock package jetty9 [ Reason ] jetty9 in Bullseye is vulnerable to CVE-2021-34429. https://bugs.debian.org/991188 [ Tests ] I have backported all the Junit tests for CVE-2021-34429 and there were no test suite regressions. [ Risks ] The debdiff is rather large but that could not be avoided. The working test suite makes me confident the issue has been fixed. [ Checklist ] [x] all changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in testing
Attachment:
jetty9.debdiff.gz
Description: application/gzip