[From nobody Mon Sep 28 20:51:07 2026 Received: (at 1133373-close) by bugs.debian.org; 28 Sep 2026 19:49:19 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 97; hammy, 150; neutral, 119; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:46784) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xBHLj-008loJ-1d for 1133373-close@bugs.debian.org; Mon, 28 Sep 2026 19:49:19 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xBHLh-00AJtS-1w for 1133373-close@bugs.debian.org; Mon, 28 Sep 2026 19:49:17 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=V6+8xzpANkEBiqsAwBXiv0cY/AimcpkEokquRhgYtTE=; b=ZWthODM2E1UOkY/Ki+FU5K2wUX ZgJOjBnzQXsvQXG2Jdk0bJsAN9oU1eFoHK2FZSGUyrMXZB+A1l7d9rX/WJarmPQ5BgAt3lqDLSo/g HMtcVoIgbzYvSIA5LuhTedTUgju28C65dOHma7UELHm8O+T5Bp9VJaJ7IYakSLAgQXLi1Rws8we/N lxmADYOxlsCOu3Hur1cLLUx75vM8hWrFgmtAV0bSKUVHIXlOJSjkY6BkDhLatpdySV2ZRUkR78hSO ZFLIRqvdGU9StR2AxTzmYBKrysl4XxIYdo2vhNQgjy6jepqm7uFqXykDWDrs/jxMsYGzwLs5vF5mS c+Szi8xQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xBHLg-00000004haT-1pnX; Mon, 28 Sep 2026 19:49:16 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Emmanuel Bourg <ebourg@apache.org> To: 1133373-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: jetty12 Debian: DAK Debian-Changes: jetty12_12.0.39-1_source.changes Debian-Source: jetty12 Debian-Version: 12.0.39-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1133373: fixed in jetty12 12.0.39-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5784718900425777060==" Message-Id: <E1xBHLg-00000004haT-1pnX@fasolo.debian.org> Date: Mon, 28 Sep 2026 19:49:16 +0000 --===============5784718900425777060== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: jetty12 Source-Version: 12.0.39-1 Done: Emmanuel Bourg <ebourg@apache.org> We believe that the bug you reported is fixed in the latest version of jetty12, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1133373@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Emmanuel Bourg <ebourg@apache.org> (supplier of updated jetty12 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 28 Sep 2026 21:38:29 +0200 Source: jetty12 Architecture: source Version: 12.0.39-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Closes: 1133373 Changes: jetty12 (12.0.39-1) unstable; urgency=3Dmedium . * New upstream release - Fixes CVE-2026-5795 (Closes: #1133373) - Refreshed the patches - Updated the Maven rules * Standards-Version updated to 4.7.4 Checksums-Sha1: 3350a57b12174cc5187e7f9ae1a1016e5cfa54db 3294 jetty12_12.0.39-1.dsc 6d1f475f5f4554cae7269d4c0284ede72f801497 16497884 jetty12_12.0.39.orig.tar.xz 0bfe0be2522897a5594570ff2660ae59a9ae5ac3 34032 jetty12_12.0.39-1.debian.tar.= xz f198691cc85d075150801ff4a23800b59abb3bf8 22094 jetty12_12.0.39-1_source.buil= dinfo Checksums-Sha256: d2d84b98f2fae73d28b1b956fca8ae42919fedc295f754b930d70f049d8103ac 3294 jetty1= 2_12.0.39-1.dsc 4c9961c248b2a35aa3f1123361451630e9d7b00d6421486db8eca0883a2a04e5 16497884 je= tty12_12.0.39.orig.tar.xz a7604e533a83cf9d6118b5faac1998ec55c0b7c1b8bed5801507b6f45cb29055 34032 jetty= 12_12.0.39-1.debian.tar.xz 27eadaa73aee7636b16ef6620a4c62d75a3971a1b024a9dc337048b92eafce1e 22094 jetty= 12_12.0.39-1_source.buildinfo Files: 7dba676009d401bdac7c802bc2495c14 3294 java optional jetty12_12.0.39-1.dsc f34af419adce05f1545d2c293d258ef5 16497884 java optional jetty12_12.0.39.orig= .tar.xz c49634e307068d5ec76fabd98a767117 34032 java optional jetty12_12.0.39-1.debia= n.tar.xz bdce433ad21f4e3e1119b7344fac2c50 22094 java optional jetty12_12.0.39-1_sourc= e.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmq6wksSHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCskxwP/2cQLctGS3yDR6Kx5dYwm+ydwXvfJpXC AWpu1fZ6A9B+wjZYXatswYcHip8DeDmFmorkjJVzOIEillBoqtLG0I2Ti1gJ9KAo mp6zHnwMGCuHoKwRIjWbDEZlWM3oP4tIsrIYloMaWECRB6z2FHWfZe/CVA2fm2rL KC1zkDZu2RAyOOAsSB2UIaQFXii5ONvT2PtgBag7PSjWIHN8tVW5isuPH/5yP98h Oa54pPixG2/10/lY51YV6eFgOnR1kT3N107uAV3zIKENvylfpINYNo3nfohNhcOs EcfE45G7igmFyJOJPL3D7sIMVXv1aMsMnceIHFfUFdr+MruKuvr6vL7K6hhSPGUy yrgvNmG7ooAu3V7ebTXfDjDXgGvY7whJZu5EoFtFQosmIAA0T1LUAQZnGpbDcckK tQT9c0mD/QtNRZ39/4qtN0629OC4tQuSHJH0/t2POCsAbSpHVVLbAFqdCC5gNM2D cWs4kJ3U9863f2XrhzEFbK2qulyJXu64EWZWX7wmzbCet79L1yfnPBqloSISniHw 9i2TfMHByJPkD5vwWo3cVicpr7hRwYc/CUmv0MdrROw/CtrjQJzhc9PkQXOTdAvu 9NkswRSDV7pZW5B0PhiKXrPf2g6ENfSvoFd58AdpJmhMrszW9nLR/72ITEaNCxDi sGLZgoasjRMX =3Ddpk2 -----END PGP SIGNATURE----- --===============5784718900425777060== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCarrEvAAKCRCb9qggYcy5 IW8HAP4zMEAPUVGBm3y1AJalQfEEKlciZXW7fryimONiuk4RbgD/RBrvCiS9yZ/8 5WXXp6LkUgXrVKXB6mAbRDXZ9ZqLcQU= =cNZL -----END PGP SIGNATURE----- --===============5784718900425777060==-- ]