------------------------------------------------------------------- Tue Oct 19 07:13:12 UTC 2021 - Fridrich Strba - Make importing of package sun.misc optional since not all jdk versions export it ------------------------------------------------------------------- Mon Jul 19 06:58:23 UTC 2021 - Fridrich Strba - Update to version 9.4.43.v20210629 * Fix: bsc#1188438, CVE-2021-34429 * Changes: + Improve alias checking in PathResource + java.nio.ReadOnlyBufferException + Deprecate support for UTF16 encoding in URIs + Update to spifly 1.3.3 + Update to asm 9.1 ------------------------------------------------------------------- Wed Jun 9 14:07:47 UTC 2021 - Fridrich Strba - Update to version 9.4.42.v20210604 * Fix: bsc#1187117, CVE-2021-28169 ------------------------------------------------------------------- Fri May 14 16:57:01 UTC 2021 - Ferdinand Thiessen - Update to version 9.4.40.v20210413 * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when client send data length > 17408 * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory from deployment scan * Improve handling of unconsumed content * Jetty start.jar always reports jetty.tag.version as master * HttpConnection.getBytesIn() incorrect for requests with chunked content * SslConnection compacting ------------------------------------------------------------------- Fri Mar 12 11:11:07 UTC 2021 - Fridrich Strba - Upgrade to upstream version 9.4.38.v20210224 * Fixes bsc#1182898, CVE-2020-27223 ------------------------------------------------------------------- Mon Dec 7 18:12:50 UTC 2020 - Fridrich Strba - Upgrade to upstream version 9.4.35.v20201120 * Fixes bsc#1179727, CVE-2020-27218 ------------------------------------------------------------------- Thu Nov 19 13:05:09 UTC 2020 - Fridrich Strba - Upgrade to upstream version 9.4.30.v20200611 ------------------------------------------------------------------- Thu Apr 2 09:25:19 UTC 2020 - Fridrich Strba - Upgrade to upstream version 9.4.27.v20200227 ------------------------------------------------------------------- Thu Nov 28 09:02:29 UTC 2019 - Fridrich Strba - Removed patch: * jetty-annotations-asm6.patch + not needed when building against ASM7 ------------------------------------------------------------------- Fri Nov 8 10:42:50 UTC 2019 - Fridrich Strba - Initial packaging of the websocket submodules of jetty 9.4.22.v20191022