Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 12 | jetty9 | 9.4.57-1.1~deb12u1 |
| Debian · 13 | jetty9 | 9.4.57-1.1~deb13u1 |
Vulnerabilities 1
-
High 7.7
MadeYouReset HTTP/2 vulnerability
In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state,…