Fridrich Strba 2024-10-15 22:12:00 +00:00 committed by Git OBS Bridge
parent 7c99e4058a
commit 4eb75c030f
5 changed files with 25 additions and 5 deletions

View File

@ -3,10 +3,14 @@ Tue Oct 15 21:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>
- Upgrade to version 9.4.56.v20240826
* Security fixes:
+ CVE-2024-6763, bsc#1231652, ThreadLimitHandler.getRemote()
+ CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote()
vulnerable to remote DoS attacks
* Changes:
+ #12201 backport ThreadLimitHandler improvements from Jetty 12
+ #11938 - Updating URL refs from eclipse.org/jetty and
eclipse.dev/jetty to jetty.org (including XML dtd references)
+ #10805 - Jetty response with an invalid HTTP2 packet if the
client set the hpack table size as 0
-------------------------------------------------------------------
Fri Oct 11 10:31:15 UTC 2024 - Fridrich Strba <fstrba@suse.com>

View File

@ -3,10 +3,14 @@ Tue Oct 15 21:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>
- Upgrade to version 9.4.56.v20240826
* Security fixes:
+ CVE-2024-6763, bsc#1231652, ThreadLimitHandler.getRemote()
+ CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote()
vulnerable to remote DoS attacks
* Changes:
+ #12201 backport ThreadLimitHandler improvements from Jetty 12
+ #11938 - Updating URL refs from eclipse.org/jetty and
eclipse.dev/jetty to jetty.org (including XML dtd references)
+ #10805 - Jetty response with an invalid HTTP2 packet if the
client set the hpack table size as 0
-------------------------------------------------------------------
Fri Oct 11 17:30:25 UTC 2024 - Fridrich Strba <fstrba@suse.com>

View File

@ -3,10 +3,14 @@ Tue Oct 15 21:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>
- Upgrade to version 9.4.56.v20240826
* Security fixes:
+ CVE-2024-6763, bsc#1231652, ThreadLimitHandler.getRemote()
+ CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote()
vulnerable to remote DoS attacks
* Changes:
+ #12201 backport ThreadLimitHandler improvements from Jetty 12
+ #11938 - Updating URL refs from eclipse.org/jetty and
eclipse.dev/jetty to jetty.org (including XML dtd references)
+ #10805 - Jetty response with an invalid HTTP2 packet if the
client set the hpack table size as 0
-------------------------------------------------------------------
Tue Feb 27 12:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>

View File

@ -3,10 +3,14 @@ Tue Oct 15 21:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>
- Upgrade to version 9.4.56.v20240826
* Security fixes:
+ CVE-2024-6763, bsc#1231652, ThreadLimitHandler.getRemote()
+ CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote()
vulnerable to remote DoS attacks
* Changes:
+ #12201 backport ThreadLimitHandler improvements from Jetty 12
+ #11938 - Updating URL refs from eclipse.org/jetty and
eclipse.dev/jetty to jetty.org (including XML dtd references)
+ #10805 - Jetty response with an invalid HTTP2 packet if the
client set the hpack table size as 0
-------------------------------------------------------------------
Tue Feb 27 12:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>

View File

@ -3,10 +3,14 @@ Tue Oct 15 21:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>
- Upgrade to version 9.4.56.v20240826
* Security fixes:
+ CVE-2024-6763, bsc#1231652, ThreadLimitHandler.getRemote()
+ CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote()
vulnerable to remote DoS attacks
* Changes:
+ #12201 backport ThreadLimitHandler improvements from Jetty 12
+ #11938 - Updating URL refs from eclipse.org/jetty and
eclipse.dev/jetty to jetty.org (including XML dtd references)
+ #10805 - Jetty response with an invalid HTTP2 packet if the
client set the hpack table size as 0
-------------------------------------------------------------------
Tue Feb 27 12:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com>