2022-03-29 16:16:45 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 29 14:13:33 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Upgrade to version 9.4.46.v20220328
|
|
|
|
|
* Changes
|
|
|
|
|
+ Option --write-module-graph produces wrong .dot file
|
|
|
|
|
+ ArrayTrie getBest fails to match the empty string entry in
|
|
|
|
|
certain cases
|
|
|
|
|
+ Interrupt flag is not always cleared in between requests
|
|
|
|
|
+ Gzip compression not working for multipart/form-data when
|
|
|
|
|
added to the allowed list using addIncludedMimeTypes.
|
|
|
|
|
+ Miconfigured headerCacheSize in can result in
|
|
|
|
|
IllegalArgumentException
|
|
|
|
|
+ HttpServletResponse.encodeURL not working for URLs starting
|
|
|
|
|
with ../
|
|
|
|
|
|
2022-03-22 16:50:28 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 22 15:49:28 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Build with java source and target levels 8
|
|
|
|
|
- Fix javadoc generation on JDK >= 13
|
|
|
|
|
|
2021-10-19 09:14:32 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 19 07:13:12 UTC 2021 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Make importing of package sun.misc optional since not all jdk
|
|
|
|
|
versions export it
|
|
|
|
|
|
2021-06-09 16:12:36 +02:00
|
|
|
-------------------------------------------------------------------
|
2021-07-19 09:01:30 +02:00
|
|
|
Mon Jul 19 06:58:23 UTC 2021 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 9.4.43.v20210629
|
|
|
|
|
* Fix: bsc#1188438, CVE-2021-34429
|
|
|
|
|
* Changes:
|
|
|
|
|
+ Improve alias checking in PathResource
|
|
|
|
|
+ java.nio.ReadOnlyBufferException
|
|
|
|
|
+ Deprecate support for UTF16 encoding in URIs
|
|
|
|
|
+ Update to spifly 1.3.3
|
|
|
|
|
+ Update to asm 9.1
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2021-06-09 16:12:36 +02:00
|
|
|
Wed Jun 9 14:07:47 UTC 2021 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 9.4.42.v20210604
|
|
|
|
|
* Fix: bsc#1187117, CVE-2021-28169
|
|
|
|
|
|
2021-05-14 19:18:17 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri May 14 16:57:01 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
|
|
|
|
|
|
|
|
|
|
- Update to version 9.4.40.v20210413
|
2021-06-23 09:33:58 +02:00
|
|
|
* Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
|
2021-06-09 16:50:38 +02:00
|
|
|
client send data length > 17408
|
2021-06-23 09:33:58 +02:00
|
|
|
* Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
|
2021-06-09 16:50:38 +02:00
|
|
|
* Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
|
|
|
|
|
from deployment scan
|
2021-05-14 19:18:17 +02:00
|
|
|
* Improve handling of unconsumed content
|
|
|
|
|
* Jetty start.jar always reports jetty.tag.version as master
|
|
|
|
|
* HttpConnection.getBytesIn() incorrect for requests with chunked
|
|
|
|
|
content
|
|
|
|
|
* SslConnection compacting
|
|
|
|
|
|
2021-03-12 12:13:39 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 12 11:11:07 UTC 2021 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Upgrade to upstream version 9.4.38.v20210224
|
|
|
|
|
* Fixes bsc#1182898, CVE-2020-27223
|
|
|
|
|
|
2020-12-07 19:15:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 7 18:12:50 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Upgrade to upstream version 9.4.35.v20201120
|
|
|
|
|
* Fixes bsc#1179727, CVE-2020-27218
|
|
|
|
|
|
2020-11-19 14:06:20 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 19 13:05:09 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Upgrade to upstream version 9.4.30.v20200611
|
|
|
|
|
|
2020-04-02 11:26:22 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 2 09:25:19 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Upgrade to upstream version 9.4.27.v20200227
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-11-28 10:03:55 +01:00
|
|
|
Thu Nov 28 09:02:29 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Removed patch:
|
|
|
|
|
* jetty-annotations-asm6.patch
|
|
|
|
|
+ not needed when building against ASM7
|
|
|
|
|
|
2019-11-08 11:43:59 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 8 10:42:50 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Initial packaging of the websocket submodules of jetty
|
|
|
|
|
9.4.22.v20191022
|
