[Git][security-tracker-team/security-tracker][master] Add tracking of two more jetty issues to be triaged

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d96cd01b by Salvatore Bonaccorso at 2026-07-29T08:14:18+02:00
Add tracking of two more jetty issues to be triaged

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15635,7 +15635,10 @@ CVE-2026-10577 (A security issue exists within the 1715-AENTR EtherNet/IP Adapte
 CVE-2026-10573 (A denial-of-service security issue exists in 1734POINTI/O\u2122module. ...)
 	NOT-FOR-US: Rockwell Automation
 CVE-2026-10051 (In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the se ...)
-	TODO: check
+	- jetty12 <unfixed>
+	- jetty9 <unfixed>
+	NOTE: https://github.com/jetty/jetty.project/security/advisories/GHSA-f4v5-65jj-pcr2
+	TODO: check, jetty9 might not be affected as not explicitly mentioned in the GhSA and still supported
 CVE-2026-0515 (Insufficient Parameter Validation in the SchedGet() system call could  ...)
 	NOT-FOR-US: Blackberry
 CVE-2025-8412 (A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow ...)
@@ -15667,6 +15670,10 @@ CVE-2025-12011 (A denial-of-service issue existsin5370/5570controllers. This vul
 CVE-2025-11698 (A denial-of-service issue exists in5380/5480/5580controllersbootfirmwa ...)
 	NOT-FOR-US: Rockwell Automation
 CVE-2024-7708 (For requests that have a body, but reading the body may end up in read ...)
+	- jetty12 <undetermined>
+	- jetty9 <undetermined>
+	NOTE: https://github.com/jetty/jetty.project/security/advisories/GHSA-9299-c6m4-mjhc
+	NOTE: https://github.com/jetty/jetty.project/pull/12156
 	TODO: check
 CVE-2026-15719 (We are aware that exploit code for this is public however we are not a ...)
 	{DSA-6394-1 DLA-4695-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d96cd01b81cea92d393d43621db22ffa559c1adf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d96cd01b81cea92d393d43621db22ffa559c1adf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/959a7fb7/attachment.htm>