UbuntuUpdates.org

Package "jetty"

Name: jetty

Description:

Java servlet engine and webserver
Latest version: 6.1.26-1ubuntu1.2
Release: trusty (14.04)
Level: security
Repository: universe
Homepage: http://jetty.mortbay.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "jetty"

All arch deb package
APT INSTALL

Other versions of "jetty" in Trusty

Repository Area Version
base universe 6.1.26-1ubuntu1
updates universe 6.1.26-1ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 6.1.26-1ubuntu1.2 2019-01-30 20:06:55 UTC

  jetty (6.1.26-1ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Possible Timing Attack.
    - debian/patches/CVE-2017-9735.patch: A timing channel in Password.java.
    - CVE-2017-9735

 -- Eduardo Barretto <email address hidden> Wed, 30 Jan 2019 13:43:03 -0200
CVE-2017-9735 Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by obser


About   -   Send Feedback to @ubuntu_updates