*/*: bump portrevision after java_default=25 update Included all ports that have USES=java. PR: 29355986813e9ccf
Port details
www/jetty1010.0.25_2
Full-featured web server implemented entirely in Java
- Maintainer
- zi@FreeBSD.org
- Packages
- jetty10 10.0.25_2
- Upstream
- up to date
- CPE
eclipse:jettyfrom the port- WWW
- https://www.eclipse.org/jetty/
- Links
- cgit · VuXML
Unaddressed (6) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 10.0.31 would fix 3 of 6 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 10.0.28 1 · 10.0.29 2 · 10.0.31 3
| CVE-2026-10050 | 8.7 | 2026-08-04 | In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for… |
| CVE-2025-5115 | 7.7 | 2025-08-20 | In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by … |
| CVE-2026-2332 | 7.4 | 2026-04-14 | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * htt… |
| CVE-2026-5795 | 7.4 | 2026-04-08 | In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there a… |
| CVE-2026-6790 | 5.3 | 2026-07-14 | In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (i… |
| CVE-2025-11143 | 3.7 | 2026-03-05 | The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple com… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (9)
*/*: bump portrevision after java_default=21 update PR: 2728552baaf16375
www/jetty10: Update to 10.0.258b203079a5
Mk/**java.mk: Convert bsd.java.mk to USES The following features have been added or changed: - Instead of USE_JAVA use USES=java. This defaults to USES=java:build,run if NO_BUILD is undefined. Else it defaults to USES=java:run - Instead of USE_ANT=yes use USES=java:ant which also implies USES=java:build - Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or extract - Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply build or run - Instead of JAVA_RUN=yes use USES=java:run does not imply extract or build - Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version> Approved by: mat (portmgr), glewis Differential Revision: https://reviews.freebsd.org/D482010835676e36
www/jetty10: Update to 10.0.214b1c3d68d3
www/jetty10: Update to 10.0.1988104db310
www/jetty10: Update to 10.0.166e927dd335
www/jetty10: Fix LICENSE_FILE6d24f07e85
www/jetty10: New port The Jetty Web Server provides an HTTP server and Servlet container capable of serving static and dynamic content either from a standalone or embedded instantiations. From jetty-7, the jetty webserver and other core compoments are hosted by the eclipse foundation. The project provides: * Asynchronous HTTP Server * Standard based Servlet Container * Web Sockets server * Asynchronous HTTP Client * OSGi, JNDI, JMX, JASPI, AJP support8a784182f6