CVE-2017-9735: Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.
Lintian reports
1 error
and
2 warnings
about this package. You should make the package lintian clean getting rid of them.
Standards version of the package is outdated.
high
The package is severely out of date with respect to the Debian Policy.The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.0.0 instead of
3.9.8).
Depends on packages which need a new maintainer
normal
The packages that jetty9 depends on which need a new maintainer are:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/j/jetty9.png){kind=link}