------------------------------------------------------------------- Fri Jul 8 15:15:05 UTC 2022 - Fridrich Strba - Upgrade to version 9.4.48.v20220622 * Fixes + #8184 - All suffix globs except first fail to match if path has "." character in prefix section + #8145 - RegexPathSpec backport of optional group name/info lookup if regex fails + #8088 - Add option to configure exitVm on ShutdownMonitor from System properties + #8067 - Wall time usage in DoSFilter RateTracker results in false positive alert + #8014 - Review HttpRequest URI construction (Resolves CVE-2022-2047, bsc#1201317) + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578 parser + #7947 - Improved PathSpec handling for servletName & pathInfo + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048, bsc#1201316) + #7918 - PathMappings.asPathSpec does not allow root ServletPathSpec + #7863 - Default servlet drops first accept-encoding header if there is more than one. + #7858 - GZipHandler does not play nice with other handlers in HandlerCollection + #7837 - Fix StatisticsHandler in the case a Handler throws exception + #7809 - Jetty 9.4.x 7801 duplicate set session cookies + #7748 - Allow overriding of url-pattern mapping in ServletContextHandler to allow for regex or uri-template matching ------------------------------------------------------------------- Tue Mar 29 14:13:33 UTC 2022 - Fridrich Strba - Upgrade to version 9.4.46.v20220328 * Changes + Option --write-module-graph produces wrong .dot file + ArrayTrie getBest fails to match the empty string entry in certain cases + Interrupt flag is not always cleared in between requests + Gzip compression not working for multipart/form-data when added to the allowed list using addIncludedMimeTypes. + Miconfigured headerCacheSize in can result in IllegalArgumentException + HttpServletResponse.encodeURL not working for URLs starting with ../ ------------------------------------------------------------------- Tue Mar 22 15:49:28 UTC 2022 - Fridrich Strba - Build with java source and target levels 8 - Fix javadoc generation on JDK >= 13 ------------------------------------------------------------------- Tue Oct 19 07:13:12 UTC 2021 - Fridrich Strba - Make importing of package sun.misc optional since not all jdk versions export it ------------------------------------------------------------------- Mon Jul 19 10:11:08 UTC 2021 - Fridrich Strba - Splitting jetty-unixsocket 9.4.43.v20210629 into a separate spec file