[Git][security-tracker-team/security-tracker][master] new jetty issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a1a09ce7 by Moritz Muehlenhoff at 2026-10-17T13:41:24+02:00
new jetty issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1643,16 +1643,21 @@ CVE-2026-19863 (An unauthenticated client may access certain protected resources
 CVE-2026-19377 (Improper certificate validation in the tunnel handshake in Cato Client ...)
 	NOT-FOR-US: Cato
 CVE-2026-18662 (In Eclipse Jetty, across various versions of `jetty-security`, and `je ...)
-	TODO: check
+	- jetty12 12.0.39-1
+	- jetty9 <unfixed>
+	NOTE: https://github.com/jetty/jetty.project/security/advisories/GHSA-phjh-v7c6-g7mv
 CVE-2026-18661 (In Eclipse Jetty, across various versions of `jetty-annotations`, and  ...)
-	TODO: check
+	- jetty12 12.0.39-1
+	- jetty9 <unfixed>
+	NOTE: https://github.com/jetty/jetty.project/security/advisories/GHSA-v6xf-996f-c35f
 CVE-2026-18660 (In Eclipse Jetty, across various versions of `jetty-server`, and `jett ...)
 	- jetty12 12.0.39-1
 	- jetty9 <unfixed>
 	NOTE: https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf
-	TODO: check details if affects src:jetty* or only external components
 CVE-2026-18659 (In Eclipse Jetty, across various versions of `jetty-security`, and `je ...)
-	TODO: check
+	- jetty12 12.0.39-1
+	- jetty9 <unfixed>
+	NOTE: https://github.com/jetty/jetty.project/security/advisories/GHSA-53x7-f9fc-h7qr
 CVE-2026-17525 (Incomplete cleanup vulnerability in ABB My Control System.  This issue ...)
 	NOT-FOR-US: ABB group
 CVE-2026-16438 (Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GE ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1a09ce7832a2b6bfe34c7916d49e77827755a79

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1a09ce7832a2b6bfe34c7916d49e77827755a79
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/d2dd0946/attachment.htm>