*/*: bump portrevision after java_default=25 update Included all ports that have USES=java. PR: 29355986813e9ccf
Port details
www/jetty1212.0.31_2
Full-featured web server implemented entirely in Java
- Maintainer
- zi@FreeBSD.org
- Packages
- jetty12 12.0.31_2
- Upstream
- Higher version available: 12.1.14
- CPE
eclipse:jettyfrom the port- WWW
- https://www.eclipse.org/jetty/
- Links
- cgit · VuXML
Unaddressed (7) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 12.0.36 would fix 7 of 7 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 12.0.32 1 · 12.0.33 2 · 12.0.34 3 · 12.0.35 5 · 12.0.36 7
| CVE-2026-10050 | 8.7 | 2026-08-04 | In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for… |
| CVE-2026-1605 | 7.5 | 2026-03-05 | In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is pr… |
| CVE-2026-2332 | 7.4 | 2026-04-14 | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * htt… |
| CVE-2026-5795 | 7.4 | 2026-04-08 | In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there a… |
| CVE-2026-10051 | 6.9 | 2026-07-14 | In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent r… |
| CVE-2026-8384 | 5.3 | 2026-07-14 | In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead … |
| CVE-2026-6790 | 5.3 | 2026-07-14 | In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (i… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (13)
*/*: bump portrevision after java_default=21 update PR: 2728552baaf16375
www/jetty12: Update to 12.0.31bac6f4f7df
www/jetty12: Update to 12.0.25c82e95bb6b
www/jetty12: Update to 12.0.23ca74814ff9
www/jetty12: Update to 12.0.2219615f19d3
www/jetty12: Update to 12.0.20805b195025
www/jetty12: Update to 12.0.1992f709e619
www/jetty12: Fix sample file, bump PORTREVISION78ac10d6b1
www/jetty12: Update to 12.0.163e6254c0cb
Mk/**java.mk: Convert bsd.java.mk to USES The following features have been added or changed: - Instead of USE_JAVA use USES=java. This defaults to USES=java:build,run if NO_BUILD is undefined. Else it defaults to USES=java:run - Instead of USE_ANT=yes use USES=java:ant which also implies USES=java:build - Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or extract - Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply build or run - Instead of JAVA_RUN=yes use USES=java:run does not imply extract or build - Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version> Approved by: mat (portmgr), glewis Differential Revision: https://reviews.freebsd.org/D482010835676e36
www/jetty12: Update to 12.0.12779cdb6be8
www/jetty12: New port Eclipse Jetty provides a highly scalable and memory-efficient web server and servlet container, supporting many protocols such as HTTP/3,2,1 and WebSocket. Furthermore, the project offers integrations with many other technologies, such as: * Asynchronous HTTP Server * Standard based Servlet Container * Web Sockets server * Asynchronous HTTP Client * OSGi, JNDI, JMX, JASPI, AJP supportdefe5b7640