fix(cve): 修复 CVE-2025-11143 在 jetty 中的漏洞-jetty-AtomGit

Closed

fix(cve): 修复 CVE-2025-11143 在 jetty 中的漏洞 #104

infra_teamAdd on Jun 15Closed at 27 days agoMerged frominfra_team/jetty： fix-CVE-2025-11143-master into src-openeuler/jetty： master

fix(cve): 修复 CVE-2025-11143 在 jetty 中的漏洞 #104

Closed

infra_teamAdd on Jun 15Closed at 27 days ago

Merged frominfra_team/jetty fix-CVE-2025-11143-masterintosrc-openeuler/jetty master

infra_team

Jun 15

当前PR是否有AI参与:

[ ] 否

[x] Yes
__1. AI Agent 平台: Claude Code / CVE Agent Team
__2. AI 模型 : claude-sonnet-4-6
__3. Prompt 上下文 : CVE 漏洞修复全流程：归属分析、修复方案设计（backport/upgrade）、patch 生成、SPEC 文件修改（Patch/Version/Release/Changelog）、本地构建验证（rpmbuild -bp）

PR功能描述 / 为什么需要这个合入:

🔍 全量审计声明：本项目已基于上游主分支执行全量补丁审计
CVE: CVE-2025-11143
策略：backport
改动详情：
- 从 Jetty 12.x 提取 URIUtil.validateScheme() 和 URIUtil.validateInetAddress() 方法
- 适配到 9.4.x 的 URIUtil.java 和 HttpURI.java
- 增强 URI parser 对 scheme 和 IP 地址的验证，防止安全漏洞

该PR关联的issue

(格式为fixes #<issue号>, 或者resolves #<issue号>): fixes #56

希望检视人员了解:

上游补丁：https://github.com/jetty/jetty.project/compare/jetty-12.0.30...jetty-12.0.31.diff

The current Pull Request has been closed by infra_team.

I infra_team

Jun 15 Created pull request, commit a6c45785

I infra_team

Jun 15 Associated issue: CVE-2025-11143

openeuler-ci-botCollaborators

Jun 15 Set DingliZhang,wangchong1995924 as approver

openeuler-ci-botCollaborators

Jun 15 Added label: sig/sig-Java

openeuler-ci-botCollaborators

Jun 15 Comments：

Welcome To openEuler Community

Hey @infra_team , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: sig-Java ,
and any of the maintainers: @DingliZhang, @wangchong1995924 ,
and any of the committers: @caodongxia, @cherry530, @wang--ge .

60 messages are collapsed here。 See more

openeuler-ci-botCollaborators

Jun 15 Removed label: ci_processing

openeuler-ci-botCollaborators

Jun 15 Comments：

Check Name		Build Result	Build Details
check_binary_file		✅SUCCESS	#18
check_lfsconfig		☑️EXCLUDE
check_package_yaml_file		✅SUCCESS
check_repo_in_maintain		✅SUCCESS
check_consistency		✅SUCCESS
check_spec_file		✅SUCCESS
x86_64	check_build	❌FAILED	#18
aarch64	check_build	❌FAILED	#18

openeuler-ci-botCollaborators

Jun 15 Added label: ci_failed

openeuler-ci-botCollaborators

Jun 15 Comments：

@infra_team

I infra_team

27 days ago Close pull request