Debian: DSA-5664-1: jetty9 Security Advisory Updates

Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not closed), TCP congested and idle. Eventually the server will stop accepting new connections from valid clients which can cause a denial of service.

advisory attackers can clients connections debian denial of service dsa engine http idle java may security security advisory server service state tcp updates valid web web server