67 lines
2.7 KiB
Plaintext
67 lines
2.7 KiB
Plaintext
-------------------------------------------------------------------
|
|
Fri Jul 8 15:15:05 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
- Upgrade to version 9.4.48.v20220622
|
|
* Fixes
|
|
+ #8184 - All suffix globs except first fail to match if path
|
|
has "." character in prefix section
|
|
+ #8145 - RegexPathSpec backport of optional group name/info
|
|
lookup if regex fails
|
|
+ #8088 - Add option to configure exitVm on ShutdownMonitor from
|
|
System properties
|
|
+ #8067 - Wall time usage in DoSFilter RateTracker results in
|
|
false positive alert
|
|
+ #8014 - Review HttpRequest URI construction (Resolves
|
|
CVE-2022-2047, bsc#1201317)
|
|
+ #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
|
|
parser
|
|
+ #7947 - Improved PathSpec handling for servletName & pathInfo
|
|
+ #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
|
|
bsc#1201316)
|
|
+ #7918 - PathMappings.asPathSpec does not allow root
|
|
ServletPathSpec
|
|
+ #7863 - Default servlet drops first accept-encoding header if
|
|
there is more than one.
|
|
+ #7858 - GZipHandler does not play nice with other handlers in
|
|
HandlerCollection
|
|
+ #7837 - Fix StatisticsHandler in the case a Handler throws
|
|
exception
|
|
+ #7809 - Jetty 9.4.x 7801 duplicate set session cookies
|
|
+ #7748 - Allow overriding of url-pattern mapping in
|
|
ServletContextHandler to allow for regex or uri-template
|
|
matching
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 29 14:13:33 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
- Upgrade to version 9.4.46.v20220328
|
|
* Changes
|
|
+ Option --write-module-graph produces wrong .dot file
|
|
+ ArrayTrie getBest fails to match the empty string entry in
|
|
certain cases
|
|
+ Interrupt flag is not always cleared in between requests
|
|
+ Gzip compression not working for multipart/form-data when
|
|
added to the allowed list using addIncludedMimeTypes.
|
|
+ Miconfigured headerCacheSize in can result in
|
|
IllegalArgumentException
|
|
+ HttpServletResponse.encodeURL not working for URLs starting
|
|
with ../
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 22 15:49:28 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
- Build with java source and target levels 8
|
|
- Fix javadoc generation on JDK >= 13
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 19 07:13:12 UTC 2021 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
- Make importing of package sun.misc optional since not all jdk
|
|
versions export it
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 19 10:11:08 UTC 2021 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
- Splitting jetty-unixsocket 9.4.43.v20210629 into a separate spec
|
|
file
|