Register | Log in

jetty9

Java servlet engine and webserver

Choose email to subscribe with

general

source: jetty9 (main)
version: 9.4.58-1
maintainer: Debian Java Maintainers (archive) (DMD)
uploaders: Emmanuel Bourg [DMD]
arch: all
std-ver: 4.7.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 9.4.50-4+deb11u2
o-o-sec: 9.4.57-0+deb11u3
oldstable: 9.4.57-1.1~deb12u1
old-sec: 9.4.57-1.1~deb12u1
stable: 9.4.57-1.1~deb13u1
stable-sec: 9.4.57-1.1~deb13u1
testing: 9.4.58-1
unstable: 9.4.58-1

versioned links

9.4.50-4+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
9.4.57-0+deb11u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
9.4.57-1.1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
9.4.57-1.1~deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
9.4.58-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

jetty9 (2 bugs: 1, 1, 0, 0)
libjetty9-extra-java
libjetty9-java

action needed

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2025-11143: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.

Created: 2026-03-06 Last update: 2026-03-06 09:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2025-11143: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.

Created: 2026-03-06 Last update: 2026-03-06 09:30

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2025-11143: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.

Created: 2026-03-06 Last update: 2026-03-06 09:30

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2025-11143: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.

Created: 2026-03-06 Last update: 2026-03-06 09:30

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2025-11143: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.

Created: 2026-03-06 Last update: 2026-03-06 09:30

1 open merge request in Salsa normal

There is 1 open merge request for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2025-08-19 Last update: 2025-10-02 00:32

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-09-07 Last update: 2025-09-07 15:03

debian/patches: 3 patches to forward upstream low

Among the 8 debian patches available in version 9.4.58-1 of the package, we noticed the following issues:

3 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-02-10 07:32

news

[2026-02-20] jetty9 9.4.58-1 MIGRATED to testing (Debian testing watch)
[2026-02-09] Accepted jetty9 9.4.58-1 (source) into unstable (Emmanuel Bourg)
[2025-09-28] Accepted jetty9 9.4.57-1.1~deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Adrian Bunk)
[2025-09-20] Accepted jetty9 9.4.57-1.1~deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Adrian Bunk)
[2025-09-19] Accepted jetty9 9.4.57-1.1~deb12u1 (source) into oldstable-security (Debian FTP Masters) (signed by: Adrian Bunk)
[2025-09-19] Accepted jetty9 9.4.57-1.1~deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Adrian Bunk)
[2025-09-14] Accepted jetty9 9.4.57-0+deb11u3 (source) into oldoldstable-security (Adrian Bunk)
[2025-09-12] jetty9 9.4.57-1.1 MIGRATED to testing (Debian testing watch)
[2025-09-07] Accepted jetty9 9.4.57-1.1 (source) into unstable (Adrian Bunk)
[2025-04-05] Accepted jetty9 9.4.57-0+deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Markus Koschany)
[2025-04-04] Accepted jetty9 9.4.57-0+deb11u2 (source) into oldstable-security (Markus Koschany)
[2025-04-04] Accepted jetty9 9.4.57-0+deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Markus Koschany)
[2025-04-01] Accepted jetty9 9.4.57-0+deb11u1 (source) into oldstable-security (Markus Koschany)
[2025-03-08] jetty9 9.4.57-1 MIGRATED to testing (Debian testing watch)
[2025-03-03] Accepted jetty9 9.4.57-1 (source) into unstable (Emmanuel Bourg)
[2024-10-13] jetty9 9.4.56-1 MIGRATED to testing (Debian testing watch)
[2024-10-07] Accepted jetty9 9.4.56-1 (source) into unstable (Emmanuel Bourg)
[2024-08-07] jetty9 9.4.55-1 MIGRATED to testing (Debian testing watch)
[2024-08-02] Accepted jetty9 9.4.55-1 (source) into unstable (Emmanuel Bourg)
[2024-04-22] Accepted jetty9 9.4.50-4+deb12u3 (source) into proposed-updates (Debian FTP Masters) (signed by: Markus Koschany)
[2024-04-20] Accepted jetty9 9.4.50-4+deb11u2 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Markus Koschany)
[2024-04-17] Accepted jetty9 9.4.50-4+deb11u2 (source) into oldstable-security (Debian FTP Masters) (signed by: Markus Koschany)
[2024-04-17] Accepted jetty9 9.4.50-4+deb12u3 (source) into stable-security (Debian FTP Masters) (signed by: Markus Koschany)
[2024-04-08] jetty9 9.4.54-1 MIGRATED to testing (Debian testing watch)
[2024-04-06] Accepted jetty9 9.4.50-4+deb10u2 (source) into oldoldstable (Markus Koschany)
[2024-04-06] Accepted jetty9 9.4.54-1 (source) into unstable (Markus Koschany)
[2023-11-04] Accepted jetty9 9.4.50-4+deb11u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Markus Koschany)
[2023-11-04] Accepted jetty9 9.4.50-4+deb12u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Markus Koschany)
[2023-10-30] Accepted jetty9 9.4.50-4+deb10u1 (source) into oldoldstable (Markus Koschany)
[2023-10-30] Accepted jetty9 9.4.50-4+deb12u2 (source) into stable-security (Debian FTP Masters) (signed by: Markus Koschany)

1
2

bugs [bug history graph]

all: 5
RC: 1
I&N: 4
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 2)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 9.4.58-1
6 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing