jetty-jaas-9.4.54-150200.3.25.1 < > , ` ep9|XMi(tc)o+DvìJ'jRC_ fb 3d0z
mOW1hKE-u ħrd {;~hj`%*a V 6HeD
:K,7}0.e۷j˄K@ܶ-27{Te\Wp:qtΩpoT' p_= ϋ2Ss9WvSd #wYxcS 08ę y } D؋L3lݡ(}PX>r[%-' > > $ ? # d
" < ! B X n
< P ( 8 9 $ : F G H I X Y \ P ] d ^ b !" c ! d "S e "X f "[ l "] u "p v " w #P x #d y #x z # # # # # C jetty-jaas 9.4.54 150200.3.25.1 The jaas module for Jetty
Jetty is a 100% Java HTTP Server and Servlet Container. This means that you
do not need to configure and run a separate web server (like Apache) in order
to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully
featured web server for static and dynamic content. Unlike separate
server/container solutions, this means that your web server and web
application run in the same process, without interconnection overheads
and complications. Furthermore, as a pure java component, Jetty can be simply
included in your application for demonstration, distribution or deployment.
Jetty is available on all Java supported platforms.
This package contains The jaas module for Jetty. eh04-ch2a SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 OR EPL-1.0 https://www.suse.com/ Productivity/Networking/Web/Servers https://www.eclipse.org/jetty/ linux noarch # VA큤A큤 eeeee 278fcab0eb2937202a4007aadb6a9095e22fec08f88180290f8859bbf983afac 13d06be547d544652a627d58d79aefad2cd853ce77973be49b022502c80b765a 193ce616c50d53ee7f499f434798dc879a5e2869e22327e9c8d7ce0d718e4bc6 root root root root root root root root root root jetty-minimal-9.4.54-150200.3.25.1.src.rpm jetty-jaas mvn(org.eclipse.jetty:jetty-jaas) mvn(org.eclipse.jetty:jetty-jaas:pom:) osgi(org.eclipse.jetty.jaas) @ @ @
java-headless javapackages-filesystem mvn(org.eclipse.jetty:jetty-security) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.8 9.4.54.v20240208 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 ee?e'd^@djdS@cGb @bBb9@an@`i@`i@`ٹ`@`f@`KW_@_^@^]߶]X]d@fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com dimstar@opensuse.org fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com shvetz.anton@gmail.com fstrba@suse.com rpm@fthiessen.de fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com - Upgrade to version 9.4.54.v20240208
* Security fixes
+ CVE-2024-22201, bsc#1220437: HTTP/2 connection not closed
after idle timeout when TCP congested
* Other changes
+ #1256 DoSFilter leaks USER_AUTH entries
+ #11389 Strip default ports on ws/wss scheme uris too - Do not force Java 11 to build on i586 - Upgrade to version 9.4.53.v20231009
* Fixes of 9.4.53.v20231009
+ CVE-2023-44487, bsc#1216169
+ CVE-2023-36478, bsc#1216162
+ #10679 - backport HTTP/2 rate control from Jetty 10.0.x
+ #10573 - backport hpack improvements from Jetty 10.0.x
+ #10546 - backport jetty-http Huffman encoders/decoders from
Jetty 10.0.x
* Fixes of 9.4.52.v20230823
+ #10352 - Jetty accepts "+" prefixed value in Content-Length
(CVE-2023-40167, bsc#1215417)
+ #10337 - SizeLimitHandler does not enforce 0 responseLimit
+ #10169 - make sure that a ServiceLoader is retrieved before
iterating
+ #10066 - Allow SAXParserFactory or SAXParser to be configured
in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh
workaround
+ #9887 - Deprecate CGI Servlet (CVE-2023-36479, bsc#1215415)
+ #9716 - Deprecate PushSessionCacheFilter
+ #9660 - OpenId Revoked authentication allows one request
(CVE-2023-41900, bsc#1215416)
+ #9476 - onCompleteFailure called multiple times - Reproducible builds: use SOURCE_DATE_EPOCH for timestamp - Update to version 9.4.51.v20230217
* Fixes of 9.4.49.v20220914:
+ #8578 - getRequestURL can append "null" if getRequestURI is
unspecified in an authority-form request-target
+ #8493 - Review HTTP client feature setRemoveIdleDestinations
* Fixes of 9.4.50.v20221201:
+ #8774 - Added SizeLimitHandler
+ #8678 - Jetty client is not responding to GO_AWAY packet
received from (Jetty) Server and continue to send traffic on
same connection
* Fixes of 9.4.51.v20230217:
+ #9352 - Update / Fix CookieCutter
+ #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
+ #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
bsc#1210621 - Add _multibuild to define 2nd spec file as additional flavor.
Eliminates the need for source package links in OBS. - Force building with java 11 on ix86 in order to avoid random
build failures - Upgrade to version 9.4.48.v20220622
* Fixes
+ #8184 - All suffix globs except first fail to match if path
has "." character in prefix section
+ #8145 - RegexPathSpec backport of optional group name/info
lookup if regex fails
+ #8088 - Add option to configure exitVm on ShutdownMonitor from
System properties
+ #8067 - Wall time usage in DoSFilter RateTracker results in
false positive alert
+ #8014 - Review HttpRequest URI construction (Resolves
CVE-2022-2047, bsc#1201317)
+ #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
parser
+ #7947 - Improved PathSpec handling for servletName & pathInfo
+ #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
bsc#1201316)
+ #7918 - PathMappings.asPathSpec does not allow root
ServletPathSpec
+ #7863 - Default servlet drops first accept-encoding header if
there is more than one.
+ #7858 - GZipHandler does not play nice with other handlers in
HandlerCollection
+ #7837 - Fix StatisticsHandler in the case a Handler throws
exception
+ #7809 - Jetty 9.4.x 7801 duplicate set session cookies
+ #7748 - Allow overriding of url-pattern mapping in
ServletContextHandler to allow for regex or uri-template
matching - Upgrade to version 9.4.46.v20220328
* Changes
+ Option --write-module-graph produces wrong .dot file
+ ArrayTrie getBest fails to match the empty string entry in
certain cases
+ Interrupt flag is not always cleared in between requests
+ Gzip compression not working for multipart/form-data when
added to the allowed list using addIncludedMimeTypes.
+ Miconfigured headerCacheSize in can result in
IllegalArgumentException
+ HttpServletResponse.encodeURL not working for URLs starting
with ../ - Build with java source and target levels 8
- Fix javadoc generation on JDK >= 13 - Make importing of package sun.misc optional since not all jdk
versions export it - Splitting the jetty-unixsocket artifact into a separate spec file
in order to avoid extra dependencies for the jetty-minimal
package. - Update to version 9.4.43.v20210629
* Fix: bsc#1188438, CVE-2021-34429
* Changes:
+ Improve alias checking in PathResource
+ java.nio.ReadOnlyBufferException
+ Deprecate support for UTF16 encoding in URIs
+ Update to spifly 1.3.3
+ Update to asm 9.1 - Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
rewrite, start, unixsocket - Update to version 9.4.42.v20210604
* Fix: bsc#1187117, CVE-2021-28169 - Update to version 9.4.40.v20210413
* Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
client send data length > 17408
* Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
* Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
from deployment scan - Upgrade to upstream version 9.4.38.v20210224
* Fixes bsc#1182898, CVE-2020-27223 - Upgrade to upstream version 9.4.35.v20201120
* Fixes bsc#1179727, CVE-2020-27218 - Upgrade to upstream version 9.4.30.v20200611 - Upgrade to upstream version 9.4.27.v20200227 - Removed patch:
* jetty-annotations-asm6.patch
+ not needed when building against ASM7 - Upgrade to upstream version 2.9.22.v20191022
* new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
* jetty-annotations-asm6.patch
+ adapt to changed context
+ build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors - Initial packaging of a minimal version of jetty 9.4.19.v20190610
* This version is light on dependencies h04-ch2a 1709120276 9.4.54-150200.3.25.1 9.4.54.v20240208 9.4.54.v20240208 9.4.54 jetty jetty-jaas.jar jetty-minimal-jetty-jaas.xml jetty jetty-jaas.pom /usr/share/java/ /usr/share/java/jetty/ /usr/share/maven-metadata/ /usr/share/maven-poms/ /usr/share/maven-poms/jetty/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:32807/SUSE_SLE-15-SP2_Update/83b277a2843c74493c11825545dc8327-jetty-minimal.SUSE_SLE-15-SP2_Update drpm xz 5 noarch-suse-linux directory ASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract) XML 1.0 document, ASCII text exported SGML document, ASCII text P P P R R R W2a7 utf-8 cc86f59b530be13e0c9a476d4af0d234745f193fd1a87f3ff703bb002cb58c33 ? 7zXZ
! t/O8=] "k%f+&s?ioͅA
[1 7xxF 08_Ve1.*7yxl7D <}v)"ILR{RXz@V d
l_Χ7WF\RdN"P(-IPB=gAI%qC0M#<9h0CYVER7hWͱ ѱdNvH |!;|Mڠ o~Yb] :ta0z
>赻@ΐ:ՎdWYs碛A @ժq @'al$۞J 2DYҗw\D$!V"
暯Qn zyH2Es'<:\T }3ѱϿ=vFֈ<&DpS/:>t+i,r]r 4ԵxD53!/͙{OϏbϐGdԺd?
E7]ޞ l^;v`I7x7/!< u 14ФZ )V/"+%>%Hb[ 7`) H p`z}Xv# ^sn_.5`[@ 弗h,E '\[ HZā>15AI Xz
'OdCԛ
7X H@3 [a |,.:zN쎽T!a*` -旰Ec\OJ! wKvים,LLZr.o}^
QnPقox~~],t\I"
e'*DSzwŝ8fPxL9ZMhnęif&*#ltdźU Ў"k
[ 6zF;<`lߥ BoFlG1lǖEzZ : !3K@mx
%(-^m 0GFҺ
X9#{JB\A Ya\|uS0y꧍^. !iśP˅ւa*.+φp3 t8![k/s.A
} 3(w .&~f=@K n~Mz+\ <af5K&y67(vE$P)&$mb =*di+j3&h M" u DR^
_X4#
\W?YԫAl{PRNK{қ 4|W$TZ!_ׄkO4E؈|w1|V -Ii]'b&-8&K*=0/ݳ?R3Pχ^={r^ܓC05lN-?d6ըer+z@WͰ][5 $ԴfEEU"6O\
vyAh&|o7𱖼^Q mqw`mce8H<:U]k-u[0Ӡ:> mV
N=2" 2NWq I\58sS/; 7Goyk_3yA#\ףS /t
k,Hbή`oՠfvʸ.qC){'pH,f 8}_"BZ #/xC$k~G}eM{M Xu09q7_I844Y^/ E5e#j8KLcZ1q?ͯ~Dvy"5pR
aɦ6M41ZRMv;IYls -~ZA5H w]#az'lc骀4Xd,܋H(% iLU7<$.L?/H½Q}sGbQu
|oή$x ɶ hLV!A\>|4U%}0̊4y"AU+ oQ~8? \Ndg_5H5G4Gu:/|vgdDɥ N)qY wEL(w!9u7J>=rȸ\S8 'Ky53VR hp؟N 鸟D?m6,^]Zbj"@&TG
n^7-,=p*#[D.Sr}[Lu9LJnL|Q咛L#0'tBɤ&&ְH)7)ff̹[аeyEka[$пyt1܈РSqb] zEᚓr"f7z5H#V ;& 9-̈Ĉ`\Nrݞ_j{D۩ɔgkUW s\Z7(j
},!k!k=Dԝ%Mj p:k%릘VBsVUw)PߒT 2 =a?*ba;u8P oKY*qi8sz7= Uۋ#bgejj=-6h|WDi /,5"M߈ɖz}GZ㴢2 Z$݂^bvcEF;^g)R=f͂
Ôy}#Ԡ7;`[k5)`f ѮR'\N Njc'K?qG]f՞z4oF-W{N4Ɖ
ѝVpSRB(ŷ4bMƗe6.Lȇ qٝNꢤ>%YvtdD"Fy#{aeQGg?瀻ht2?-;la0 8zhzV90y ",gaЇ&L#~$ Rʳh ]`?NH]*sp^p7Cc Z 'ڿbS u2jO
wR ^QU0C?/K!WY٘I*wl[O} T w(W1xXCG}@豘K/blzTu=8g%ɽs6:d674ХCa3z脒G[S1*H +w$dGcIˏTN./Ȉ:쉫p#ۺUKR8
Z*o1*jp Xg^LΖؼT$8'+Anypp[q fI#Z !;'
Uɽ6jt^bQf#<gB:^>ҟ_7czg&
#k]ZCP8ň CWGseX.ZfW}CE͎Iuu SKvDČoeԊĕOk,)Nm,&놙>4ޣVxpm2[q>s^5xeֲ4CYAT~}c @鄤r/h8[w7Ε2JNMfu%R=+
ei0y6}lHi]2`*I=kdOBZc/n'`Vln2aJ>՟U0?w 4Ṭ+P
4^ǜ = Phi,J,. pCۧ/il.p#1Fg.CyK>x]Ѐ4$_ִ4!g6v` lRqʴ"ҼcÍQo:Mv ̑C,3d,(!_O}A/J/ ŋԫ.]c# FjL4$5Iܣ!C<%>p`*Dͥs]љ/ DG 60f֡<F煤tuM 2Ĩލ{M 0(,bu\ qY m TbVXAo>q vVe?fc۲%?@ .7q>RZ5мޥFRlP$XoE)?l ~ݶ J%Iwo91W%-J?Sڒ?B'Tjg$| zd"1%3')-!s][pLlz.JG֬w
ҝcaMl[iaS*@N%Qtyv _D`Z lm 9RDԋn2 j21IjݵP|Y5
XfQ9UsÆjLi^k^ S?=ޚ~cؒl}K{hr1Gv5pi10>yY$=[boz~ Y={@Om\ijl#
nISqP8`4O|7
DCs-Mfy7K̈́):n!)ͰN $nGlVf%||nbIo/ S@LztKm%dCRY~ZO:ͱޑ<~ tY(bTl/E)aK
ؖx!TN5RDf r x ];&C>d@JId}^`Q\2y),$A;, 8Ȭeom8cWGraqN%w_ڳI칇~ $bV)28g <&m\cԗdAFMV`Bi^eaIxxiI vk1:RC+wE~jW+2Wpʐ?fXh8I3C փviO@ZRdd{Ar H\*>D%&Wv1\_{s!&kJq+ַ,:\!9"GS_#. i)ʏtpFt!XyܾNy a!U_rJMN;x-`cPѢM(n`HZ|u"8!W=9 + L6Ԭۊ0iXNN:ڿ峔@ g*,,Uj>aC _ :"$}AE֪E ]4vW /?|V'v "d>6psy꓂U3@cRJaUcK@Oe&#:ӞaϟWTF JmL+(e5"Yg=YTT0P ̱BMj"]lJ$يW.i+GMVY"1ʎ@9XkA?{`1LrIXb`prRSYߘFpohCVVbu RX3Cb>{P)R<2 BܱjO#M nj(l*x,eT Twrc~B)燡NM.Es9O`SALD+^fu?N-!jfuV7C# Yl$%{Ja_س~9Q*jiԭ%d+0wFIGvA/IaɭoToZ_Nލa)Lءm)0PLyb)!cf p aaf?M+Ԃ3_" w,9Oʷ0͵ *G\} M mƭe"&qŲ `4@?Zۙڍ 絯* } ?Z6Rrq!K֢~^jTﳼrT̮EZh\"(rOF_&⵰W6}apyfJ)` Y<{ N~{FP xj|5sIzGqF)=%f hP?m!@2:6 Ki59}1l^$}XGɫT4*`WSmY!],zD9f/2sӷ)A5x(37:*XC>l)98豠 2(!YMl!l>"r^[9Id7, Zio&mpC Ja=zMz%\,>ӑ`4-+>3(i.xӎe<;)27z.s|V__^V/"o`yuuvI,rQ
22X
'{ ЖmgM8lB9ab&).r]v.۱^wopz VIs zpFeIy*= {Hd7Zqyn
h
0& ]k6o4%Tb!>JleqK\ oIZ
h_ ꙊSG"+.)2j2jDNGb^>13xvX/mٳ=q<O Rď#-0gy=lpqU ]@OTfG}`Y];Ey5Of)jT?}pA>9ɲamt\Ra"\. I3EҲP=@ l
]zBGfet
xJ -cMUGױ!ks 5wl$BhyŻ1M/ۋF*7M6ҵ|J D ZeS[ !5RWΝ 1( - q/ZRS xVv!Qݡ3~K۳>R!w3 bٔt_cn 5aPYPmseG|bߖ U%"ceÊdfeLTVU&$|G,)Kb6žĵկ?qH T:c\[_ i2* YK8,IҠ5o(knswN=5-~"JET '*a g nS K CKx 9 ʆ,Sz$TlW _{7aOOb( R!hԃ?mē剪kA?5i*W6 f{jn WV)͑$녬 AdUV_KpS@Ju4ⱀ܍lH+x(VXIb
d? ;yc $yR,h XMoE ҄|q( sztıQ[qnCr&&.nw%K=^̒ۚ!:ڵ,Y*ӠתA@@`[g[BK"Dv8f#!:R, &cqTy7GqQq,6̡wK.f!nuTSǐ 3]VvR:þJ.Y~> 81[{ :jclrVkWrΥ0yin t:P¡(..ӣv eNw
0?*`׳nAMKa_@~ ƃkI&u9lݶAieJ4?MZ=' VJZj BI։! 5|ѥ~r9 tTB X{p@էB00c]aZLѹes<qL-r ^B/ިɷ.o[K^ 6 {Gvq]W-c0,!ueYCk?CRc-Z˩i>e}Bl0!BZ,B" ״,va8k GJSM/GHl= O; yכErtg^a3
:pQ=-A ;$AsrDw^ $vkU7能 ]h15 ,I% a`BJN퍜7Q?j0c @Rϖ0Y<3-bS{Y&F]2VU:+)D [a%hz;2՜w| SAPfsmZMWI^M^Q?|&Gj4Ŭ 6b Da4LrZKcx1_w[))K/$9 +e kJhk| f GCy^Vmķ-z8"ct_)h/&4*3́&e?qҦтAdU}Ip}G@'YОY jGݏܬqx37;%د[A .&BRGN~z hcx,sS7:MYS+/l|A+QAH?Vy41+{߲;E zl` [6*8'0I%vpT0[s뒖R5k̉ե?eYURcYq5 - J4
rՎs~$,MX(59,x+dv}:~yՄ<%u5
{_t #pѡ;[y2ӃY>> ȅ Td֙xj1]wF/m \y-Xt rհ_ 6.2_> &~0Nk)_ A59MdЍ<!pޡSɱPy aA+ kqdhNhʘNۿSEW0 !awzYuEky*Aϑβv^BwΜccwI9\x%]h;ņd,g^ӎE/!t~){*(>j}s",(9H N=#)7XՑDzM3Ť;N>]OUXU1>YHׇ49kC$Ȱ?oT
~ [.S V#'o11Cd8c94fX6> }f 1gIKQ"#qCz47垣G f_o:DνXx[iId]vb3n[Au?Ե=0 4V R
%l"GLtIÙS G$~d +q1iY̌KQ 3[\En5]% ߯$r mZڅFq A
L9
_ҍ>F?_2Y:p: 4=LuXW}~GP]Lv@"sз? F$S
-;ΥElS;1:q_=X:l tm] 3 PuUv[W"Q#dC鶹]zO">G7m
H>
+NP3 1D^߭
<~B0+
M &bqgNkjxm#B0NTTFr5g
0H3$$I{ 6:WC. |~xy h)i&3uk,7zkr_n颪 תml?ax$Tj;6bK$;8\H-q >}9ҕ㊶v~k(`$ggڵ 5aB笢1
&˥-1mTtw'm|sjV=h@eٴL @T(6Dxj o
{BGGNb1= źHz]G/ QC(y{ϥkz݃O;C9sP>HڵrHj. ٜ\ \ǀ lgρ`O}!\ֵx p =Ƕ
YZ