[DSA 6006-1] jetty12 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6006-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
September 19, 2025                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : jetty12
CVE ID         : CVE-2025-5115

This update for Jetty, a Java servlet engine and web server, addresses
a protocol-level vulnerability in HTTP/2 support also referred to as
"MadeYouReset".

For the stable distribution (trixie), this problem has been fixed in
version 12.0.17-3.1~deb13u1.

We recommend that you upgrade your jetty12 packages.

For the detailed security status of jetty12 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/jetty12

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=RdYO
-----END PGP SIGNATURE-----