[SECURITY] [DSA 6006-1] jetty12 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6006-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
September 19, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : jetty12
CVE ID : CVE-2025-5115
This update for Jetty, a Java servlet engine and web server, addresses
a protocol-level vulnerability in HTTP/2 support also referred to as
"MadeYouReset".
For the stable distribution (trixie), this problem has been fixed in
version 12.0.17-3.1~deb13u1.
We recommend that you upgrade your jetty12 packages.
For the detailed security status of jetty12 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/jetty12
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=RdYO
-----END PGP SIGNATURE-----
Reply to: