jetty-fcgi-9.4.54-150200.3.25.1<>,=ep9|d@Uo-XqxZmp*+ΰ-b.$]l_sWmŝD ,jwX1Bl̶K0sFs m[C8{=df a%PXT3ͮ!ˏRbGYR|a jм;Z6Iбz6N#je )vmA=\J %(d f+>>'?'d  " <!BX n       Lll I( 8 9 H: F"G"H#I#4X#<Y#X\#]#^$hb$c%d&e&f&l&u&,v&Lw&x'y'4z'|''''Cjetty-fcgi9.4.54150200.3.25.1The fcgi module for Jetty Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains The fcgi module for Jetty.eh04-ch2aͲSUSE Linux Enterprise 15SUSE LLC Apache-2.0 OR EPL-1.0https://www.suse.com/Productivity/Networking/Web/Servershttps://www.eclipse.org/jetty/linuxnoarch6&i) A큤A큤eeeeeeee9e5b07fa7d28f108d075009146df3c61b0b9231a988c8d24f2cb8e28cf206780e99afa8dbe2a873f67f30784dc50ee70515aa48effde8bb7e785e7d3035edb55850b171201caeb96af42e7caa30ab4efa8e88ed4aeb9d22db41bea1f84fb657e917535214bdf0b022c2f0085d240ce44af3194da2d58f2e9dd17749bf70acd5cf5bf40e31d0c36a36578015aac527e891d7fac8d39fa847ef25a1b33134b92699434b8fb5cf9b0abc93be00d31ade731ae7af09d3761c922638509b00ad4ee84rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootjetty-minimal-9.4.54-150200.3.25.1.src.rpmjetty-fcgimvn(org.eclipse.jetty.fcgi:fcgi-client)mvn(org.eclipse.jetty.fcgi:fcgi-client:pom:)mvn(org.eclipse.jetty.fcgi:fcgi-server)mvn(org.eclipse.jetty.fcgi:fcgi-server:pom:)osgi(org.eclipse.jetty.fcgi.client)osgi(org.eclipse.jetty.fcgi.server)@ @@@@@@@@@    java-headlessjavapackages-filesystemmvn(javax.servlet:javax.servlet-api)mvn(org.eclipse.jetty.fcgi:fcgi-client)mvn(org.eclipse.jetty:jetty-client)mvn(org.eclipse.jetty:jetty-http)mvn(org.eclipse.jetty:jetty-io)mvn(org.eclipse.jetty:jetty-proxy)mvn(org.eclipse.jetty:jetty-server)mvn(org.eclipse.jetty:jetty-util)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.89.4.54.v202402089.4.54.v202402089.4.54.v202402089.4.54.v202402089.4.54.v202402089.4.54.v202402089.4.54.v202402083.0.4-14.6.0-14.0-15.2-14.14.1ee?e'd^@djdS@cGb@bBb9@an@`i@`i@`ٹ`@`f@`KW_@_^@^]߶]X]d@fstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comdimstar@opensuse.orgfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comshvetz.anton@gmail.comfstrba@suse.comrpm@fthiessen.defstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.com- Upgrade to version 9.4.54.v20240208 * Security fixes + CVE-2024-22201, bsc#1220437: HTTP/2 connection not closed after idle timeout when TCP congested * Other changes + #1256 DoSFilter leaks USER_AUTH entries + #11389 Strip default ports on ws/wss scheme uris too- Do not force Java 11 to build on i586- Upgrade to version 9.4.53.v20231009 * Fixes of 9.4.53.v20231009 + CVE-2023-44487, bsc#1216169 + CVE-2023-36478, bsc#1216162 + #10679 - backport HTTP/2 rate control from Jetty 10.0.x + #10573 - backport hpack improvements from Jetty 10.0.x + #10546 - backport jetty-http Huffman encoders/decoders from Jetty 10.0.x * Fixes of 9.4.52.v20230823 + #10352 - Jetty accepts "+" prefixed value in Content-Length (CVE-2023-40167, bsc#1215417) + #10337 - SizeLimitHandler does not enforce 0 responseLimit + #10169 - make sure that a ServiceLoader is retrieved before iterating + #10066 - Allow SAXParserFactory or SAXParser to be configured in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh workaround + #9887 - Deprecate CGI Servlet (CVE-2023-36479, bsc#1215415) + #9716 - Deprecate PushSessionCacheFilter + #9660 - OpenId Revoked authentication allows one request (CVE-2023-41900, bsc#1215416) + #9476 - onCompleteFailure called multiple times- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp- Update to version 9.4.51.v20230217 * Fixes of 9.4.49.v20220914: + #8578 - getRequestURL can append "null" if getRequestURI is unspecified in an authority-form request-target + #8493 - Review HTTP client feature setRemoveIdleDestinations * Fixes of 9.4.50.v20221201: + #8774 - Added SizeLimitHandler + #8678 - Jetty client is not responding to GO_AWAY packet received from (Jetty) Server and continue to send traffic on same connection * Fixes of 9.4.51.v20230217: + #9352 - Update / Fix CookieCutter + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620 + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049, bsc#1210621- Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS.- Force building with java 11 on ix86 in order to avoid random build failures- Upgrade to version 9.4.48.v20220622 * Fixes + #8184 - All suffix globs except first fail to match if path has "." character in prefix section + #8145 - RegexPathSpec backport of optional group name/info lookup if regex fails + #8088 - Add option to configure exitVm on ShutdownMonitor from System properties + #8067 - Wall time usage in DoSFilter RateTracker results in false positive alert + #8014 - Review HttpRequest URI construction (Resolves CVE-2022-2047, bsc#1201317) + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578 parser + #7947 - Improved PathSpec handling for servletName & pathInfo + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048, bsc#1201316) + #7918 - PathMappings.asPathSpec does not allow root ServletPathSpec + #7863 - Default servlet drops first accept-encoding header if there is more than one. + #7858 - GZipHandler does not play nice with other handlers in HandlerCollection + #7837 - Fix StatisticsHandler in the case a Handler throws exception + #7809 - Jetty 9.4.x 7801 duplicate set session cookies + #7748 - Allow overriding of url-pattern mapping in ServletContextHandler to allow for regex or uri-template matching- Upgrade to version 9.4.46.v20220328 * Changes + Option --write-module-graph produces wrong .dot file + ArrayTrie getBest fails to match the empty string entry in certain cases + Interrupt flag is not always cleared in between requests + Gzip compression not working for multipart/form-data when added to the allowed list using addIncludedMimeTypes. + Miconfigured headerCacheSize in can result in IllegalArgumentException + HttpServletResponse.encodeURL not working for URLs starting with ../- Build with java source and target levels 8 - Fix javadoc generation on JDK >= 13- Make importing of package sun.misc optional since not all jdk versions export it- Splitting the jetty-unixsocket artifact into a separate spec file in order to avoid extra dependencies for the jetty-minimal package.- Update to version 9.4.43.v20210629 * Fix: bsc#1188438, CVE-2021-34429 * Changes: + Improve alias checking in PathResource + java.nio.ReadOnlyBufferException + Deprecate support for UTF16 encoding in URIs + Update to spifly 1.3.3 + Update to asm 9.1- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart, rewrite, start, unixsocket- Update to version 9.4.42.v20210604 * Fix: bsc#1187117, CVE-2021-28169- Update to version 9.4.40.v20210413 * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when client send data length > 17408 * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory from deployment scan- Upgrade to upstream version 9.4.38.v20210224 * Fixes bsc#1182898, CVE-2020-27223- Upgrade to upstream version 9.4.35.v20201120 * Fixes bsc#1179727, CVE-2020-27218- Upgrade to upstream version 9.4.30.v20200611- Upgrade to upstream version 9.4.27.v20200227- Removed patch: * jetty-annotations-asm6.patch + not needed when building against ASM7- Upgrade to upstream version 2.9.22.v20191022 * new jetty-openid amd jetty-util-ajax sub-packages - Modified patch: * jetty-annotations-asm6.patch + adapt to changed context + build against asm6 instead of asm7 that we don't have - Fix some rpmlint warnings and errors- Initial packaging of a minimal version of jetty 9.4.19.v20190610 * This version is light on dependenciesh04-ch2a 1709120276 9.4.54-150200.3.25.19.4.54.v202402089.4.54.v202402089.4.54.v202402089.4.54.v202402089.4.549.4.54jettyfcgi-client.jarfcgi-server.jarjetty-minimal-fcgi-client.xmljetty-minimal-fcgi-server.xmljettyfcgi-client.pomfcgi-server.pom/usr/share/java//usr/share/java/jetty//usr/share/maven-metadata//usr/share/maven-poms//usr/share/maven-poms/jetty/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32807/SUSE_SLE-15-SP2_Update/83b277a2843c74493c11825545dc8327-jetty-minimal.SUSE_SLE-15-SP2_Updatedrpmxz5noarch-suse-linuxdirectoryASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract)XML 1.0 document, ASCII text PPPPRRRR RRPPRRRRRRW2a7utf-8d4b6f0d98daad9864db0e21ba39104106b5b8466d74c277f0011ac3642e61a54? 7zXZ !t/"vx]"k%=lJC٣b<,R"rewfl!HY39fLn2 cg]cԀ;1^lX@.*MvNjἷY:;W*Cur`28n Lhg1 S֨7̸+(#TBz@0џ 9-D +,Y8A۬W,b "4"g`IJΟ3xdb:Tj?"C8Xl#jk@:GrV 5 QS(s&p w#5o`SicE 4)'PbXVe iiӸN?]or5׃Q`Dv?hqJjanGCf$rEOyskqaS>yʁBL؂פ]l>u@C% {O_H,M'R@)1]FPVJ_zvAJ4\3"q7M>%Sq^$J@e}ōj#7<=sx^]Q])ƍ4/s⬟8"=͍^ HWG^p^``K9l"ÁBPGeE5MnM s ٜ0 VJrޗJ,@U\l$黐faZV,b!_ڣ*z=/tF*/k3U=fG$Gi2UrCt6?"A5Ka2W.B߉ӼٌL_%'M pQVzh,78mPr>&OD:HK/k"tlVߒ@iu9uݵ4 *襤ŗ0-w_$dKu:q薍Ք^48b@.Vk =D>nw75?l[v6?P= I6}[Gi#Q$!۞CG=eE(I|pp̣|7V]_nm[P.ߕhH[afML.yC=:?(ЫZ$5-%xיbvǖ لd3 X+?os DHhơ`yP^%^ D=0ޜO8$zDcM>aROB&/6d:G4Er"6tn9u᫯ a?}U]tRDV㌣J1΁wDa$-s|3aV/120J=u*M|Ihdy9,W@/ilG* &Nt~g9RO "- /cUp*tZ/gAe;*Wa?vlU\}UXU*0m\s5>p'C+<1-VWu7A !%IL1WRv+;пBx+gH S K6,y ptq8+(@X_m_Bl3d[k}\^N%@)QЂ9[.¶[z$^yywQ*L'Tf#HJX})J$,8ۏS6}\(S~Z?WGcgcpd'댃WĂx{"T6u9gyAڠMR"Ze gs "Lx~ng7kAN܌\FJhx76pXXVY urV69[оk^"nΤ`+qyxȻh!E I2 z=]lהQ,n5@SYq52HU[Fa wkcWvmՖ=^H%G*U 'hL/LA30e^`Qn>5j∅x*$)pXQ6S7reV,-djPq\w*ޝ LGΖkj\2L6O5rUN,L}WKɥ6rwt|H鄱zfo 3]iToBW* KT/U''Ïm|S 1}',B8HL-Xrsn]Uz 'ڕK:qVcL(9TL%٧Nt ų:uBA1rAv_EƸ9;Q<;wLC "aΪ9e1omXrp<"c+ld.[ĬH93g w_`|P(N0CPp]*"6'? "V6-Fc]PSxyOXeC9@$N sJ[^glNfiݾݐPxȣm#}qjyĻBmF7.6)%r6*>4'f^94ѡ~s'˥%W[byPz"YqI-8BNP.wy؃~LfM @.bҙn:=^j1$LumQW^gpuefA5 _wa(˫e[Pe,|d0T0̂#HWcXuP,DՍ2M>rg՘e}h~R"Ko?3I?ܑY~n#4CQ[ˁcSQrGs/BI`EĞrA0h_+#]rPFFkXp G͉m(5s_QK4V)Ϲt敦9CZ۳Ժ8@j4&'6AM%53W c:N.i<ǎvn5tOnlځ7Cܓl9Kږ^{ʡY mHBkjȣ+/eZ)ZӶ"!y()L4*Wm: 44:"D:um(vZ&O8!` kdݥ.5>#nu\Z(m-Gjo67L%V¢QUJj[%ِnluh AOP|ڤɈd4M>Xl.x)̭}PH&*vYv&CO֫e O _0llBxf? ;nRt]x^eU ]jzq?ޝ˫4BZfi _k]=,sިxtoЍ3zQ|xx] Hº9W]xkHrn22 q ޻vU*^\q=-S0nj?a ӈ$+dQׯ~ */! H- +Ll:>kDIO~MQ+ʆKQ76Jǜ-D9ڤ9BQhIy 5{i8ކF0^w?QkV4)Ω:N*L5&fcL:vWJ~x +[N M-#@-|U![=&&^R ^Ҳ8 h'F+ xX hoOOd W[Mo{Nh##D[G YZ