• Accepted jetty9 9.4.54-1 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Sat Apr 6 13:30:01 2024
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sat, 06 Apr 2024 12:54:58 +0200
    Source: jetty9
    Architecture: source
    Version: 9.4.54-1
    Distribution: unstable
    Urgency: high
    Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
    Changed-By: Markus Koschany <apo@debian.org>
    Closes: 1064923
    Changes:
    jetty9 (9.4.54-1) unstable; urgency=high
    .
    * Team upload.
    * New upstream version 9.4.54.
    - Fix CVE-2024-22201:
    It was discovered that remote attackers may leave many HTTP/2 connections
    in ESTABLISHED state (not closed), TCP congested and idle. Eventually the
    server will stop accepting new connections from valid clients which can
    cause a denial of service. (Closes: #1064923)
    Thanks to Salvatore Bonaccorso for the report.
    Checksums-Sha1:
    6f7ec9eca790dda15ebefa4cdef5ba1f5ec7cb70 2804 jetty9_9.4.54-1.dsc
    0916554e9ad12ec48e0a141e07012e263bbe7c4f 9877252 jetty9_9.4.54.orig.tar.xz
    646b89885eab28846d1430c9a442b6032eeb9f3f 30480 jetty9_9.4.54-1.debian.tar.xz
    970f196a4279d640f1eb04705566e5ac1112dc3b 19404 jetty9_9.4.54-1_amd64.buildinfo Checksums-Sha256:
    674811a262d25aa3534275d44b009341eb1e37aef7a379a50954923f226a1124 2804 jetty9_9.4.54-1.dsc
    8fd58cfa055424cae97ce2dc7e2b5b717ff390e7aeecc72998c21a23bea9104c 9877252 jetty9_9.4.54.orig.tar.xz
    351edbed121652049c6fc83d49738884fc258d5bf72b7fcb1922b3a291b17748 30480 jetty9_9.4.54-1.debian.tar.xz
    f07de135abafc7e3d1ccbfdeaa568e1f80c70464cf42bb46d0f1b65bff2ff6b2 19404 jetty9_9.4.54-1_amd64.buildinfo
    Files:
    55703a729cce7be9fcb0e2d2c656b1c5 2804 java optional jetty9_9.4.54-1.dsc
    e98515258f92ec2b1aea4f0d71167069 9877252 java optional jetty9_9.4.54.orig.tar.xz
    993e59e5b0225080b5381a18f2170bf6 30480 java optional jetty9_9.4.54-1.debian.tar.xz
    38794c89605a432b735a57df50e7a7be 19404 java optional jetty9_9.4.54-1_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmYRLABfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkimUQALrTr2l/4/E0FLy1vQUwIKe5NV3LkKT3yhtc sDKrOKWaKb712hPhtX8uH6VNI1PJAMJsUODf6KsqVlGlBLn4TdI41a2hTsriNTBy gyesprqXDWNUd7Iyr/Cf6ivD6R1qzZg+lswCK4xB4v2krW/vRhlAhZT6XdpBRO1c idVhGNX6vja9idyiJfKMSEA/A6gEpUPxRTEvA3MR0Lo04dkSc0WY0MX5Cl7Y45Xv gbVQP2JTpPRzY9atNDEbro2fl9lDRgW7ygblpMyiAJKcYjynC43kU80ulpp/2OgU YYRWpra1DawotAg4SmWwtVtXxEJ/e53SpvWRp7pN7uRJkPy7HntgkOIIQGJ9FJae prN9ae0CHZn1QIsiLonKrdjgKEIqHBl0D3bQzR9yDPb81BwesXF/n7qzpM1iuFZj 2mGZ5/gj76HjmVg6pb6LZXjLF+t4wfRg8mr1xARMxk5RZdbmAyNN5XQ/0ZmbGpvu SaAvwJnjg4jUyE1/vXKX9ASX7DXjEpNq0RwHCcRXVTm9vInosKQUKnqSPNzKVE74 nPgY/KIKNe+E5t5LbcBqZ67ebI9LkQ5tOUNyVI4fLEFf3RgGdOMN4/cTgTF7tzmK zv3dIX5nLB5dEAVAXGz+Zo6P5Adw1Lz4xAuJQWr1zWB+kKZ6yhlitU5JnHINiOUM
    K+SeftRN
    =iteK
    -----END PGP SIGNATURE-----


    --==============A62502455944547727=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCZhEv5QAKCRCb9qggYcy5 ISz6AP40OCFCIeUmqDzG6RyVl9eiUN5Kn8UX2FIoibxGbsYKKAEAjHB4/tKVPMed U0ry+a0bj44wvZDDqDOIib1Hyw2M2w0ÛIU
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)