jetty-jaas-9.4.53-150200.3.22.1 < > , _4 e(p9|L jMՄmU0-BNU+&ғ
9}G[Fb? hDG(N%<] ]v N D Ai|}"e`g qھ6;p
KH
VYɸ.čJRω2To / U t @iΙ~I; j! iYFP# e
~~H>DC ԔJ[|ZJ$b
Mn#ӽAǁ1J!% ދ2 > > " ? " d
" < ! B X n
< P ( 8 9 : y F L G ` H t I X Y \ ] ^ ; b c [ d e f l u ! v ! w ! x ! y " z " "0 "4 ": "| C jetty-jaas 9.4.53 150200.3.22.1 The jaas module for Jetty
Jetty is a 100% Java HTTP Server and Servlet Container. This means that you
do not need to configure and run a separate web server (like Apache) in order
to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully
featured web server for static and dynamic content. Unlike separate
server/container solutions, this means that your web server and web
application run in the same process, without interconnection overheads
and complications. Furthermore, as a pure java component, Jetty can be simply
included in your application for demonstration, distribution or deployment.
Jetty is available on all Java supported platforms.
This package contains The jaas module for Jetty. e(h01-ch4c SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 OR EPL-1.0 https://www.suse.com/ Productivity/Networking/Web/Servers https://www.eclipse.org/jetty/ linux noarch 9 VA큤A큤 e(e(e(e(e( be9ec52e2631637d8dc0870880b3be8fc0741a54311688e90ee60a7e28f8b74d cc6bf319312d0a10eb6c393ef811a607e55f5361af9e34ab64706af1bc41b4cb 0cb0917038d5a01e6c961d00b0c01a5d1eb6fd8b6386623575323ceea0237446 root root root root root root root root root root jetty-minimal-9.4.53-150200.3.22.1.src.rpm jetty-jaas mvn(org.eclipse.jetty:jetty-jaas) mvn(org.eclipse.jetty:jetty-jaas:pom:) osgi(org.eclipse.jetty.jaas) @ @ @
java-headless javapackages-filesystem mvn(org.eclipse.jetty:jetty-security) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.8 9.4.53.v20231009 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 e'd^@djdS@cGb @bBb9@an@`i@`i@`ٹ`@`f@`KW_@_^@^]߶]X]d@fstrba@suse.com fstrba@suse.com fstrba@suse.com dimstar@opensuse.org fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com shvetz.anton@gmail.com fstrba@suse.com rpm@fthiessen.de fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com - Upgrade to version 9.4.53.v20231009
* Fixes of 9.4.53.v20231009
+ CVE-2023-44487, bsc#1216169
+ CVE-2023-36478, bsc#1216162
+ #10679 - backport HTTP/2 rate control from Jetty 10.0.x
+ #10573 - backport hpack improvements from Jetty 10.0.x
+ #10546 - backport jetty-http Huffman encoders/decoders from
Jetty 10.0.x
* Fixes of 9.4.52.v20230823
+ #10352 - Jetty accepts "+" prefixed value in Content-Length
(CVE-2023-40167, bsc#1215417)
+ #10337 - SizeLimitHandler does not enforce 0 responseLimit
+ #10169 - make sure that a ServiceLoader is retrieved before
iterating
+ #10066 - Allow SAXParserFactory or SAXParser to be configured
in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh
workaround
+ #9887 - Deprecate CGI Servlet (CVE-2023-36479, bsc#1215415)
+ #9716 - Deprecate PushSessionCacheFilter
+ #9660 - OpenId Revoked authentication allows one request
(CVE-2023-41900, bsc#1215416)
+ #9476 - onCompleteFailure called multiple times - Reproducible builds: use SOURCE_DATE_EPOCH for timestamp - Update to version 9.4.51.v20230217
* Fixes of 9.4.49.v20220914:
+ #8578 - getRequestURL can append "null" if getRequestURI is
unspecified in an authority-form request-target
+ #8493 - Review HTTP client feature setRemoveIdleDestinations
* Fixes of 9.4.50.v20221201:
+ #8774 - Added SizeLimitHandler
+ #8678 - Jetty client is not responding to GO_AWAY packet
received from (Jetty) Server and continue to send traffic on
same connection
* Fixes of 9.4.51.v20230217:
+ #9352 - Update / Fix CookieCutter
+ #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
+ #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
bsc#1210621 - Add _multibuild to define 2nd spec file as additional flavor.
Eliminates the need for source package links in OBS. - Force building with java 11 on ix86 in order to avoid random
build failures - Upgrade to version 9.4.48.v20220622
* Fixes
+ #8184 - All suffix globs except first fail to match if path
has "." character in prefix section
+ #8145 - RegexPathSpec backport of optional group name/info
lookup if regex fails
+ #8088 - Add option to configure exitVm on ShutdownMonitor from
System properties
+ #8067 - Wall time usage in DoSFilter RateTracker results in
false positive alert
+ #8014 - Review HttpRequest URI construction (Resolves
CVE-2022-2047, bsc#1201317)
+ #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
parser
+ #7947 - Improved PathSpec handling for servletName & pathInfo
+ #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
bsc#1201316)
+ #7918 - PathMappings.asPathSpec does not allow root
ServletPathSpec
+ #7863 - Default servlet drops first accept-encoding header if
there is more than one.
+ #7858 - GZipHandler does not play nice with other handlers in
HandlerCollection
+ #7837 - Fix StatisticsHandler in the case a Handler throws
exception
+ #7809 - Jetty 9.4.x 7801 duplicate set session cookies
+ #7748 - Allow overriding of url-pattern mapping in
ServletContextHandler to allow for regex or uri-template
matching - Upgrade to version 9.4.46.v20220328
* Changes
+ Option --write-module-graph produces wrong .dot file
+ ArrayTrie getBest fails to match the empty string entry in
certain cases
+ Interrupt flag is not always cleared in between requests
+ Gzip compression not working for multipart/form-data when
added to the allowed list using addIncludedMimeTypes.
+ Miconfigured headerCacheSize in can result in
IllegalArgumentException
+ HttpServletResponse.encodeURL not working for URLs starting
with ../ - Build with java source and target levels 8
- Fix javadoc generation on JDK >= 13 - Make importing of package sun.misc optional since not all jdk
versions export it - Splitting the jetty-unixsocket artifact into a separate spec file
in order to avoid extra dependencies for the jetty-minimal
package. - Update to version 9.4.43.v20210629
* Fix: bsc#1188438, CVE-2021-34429
* Changes:
+ Improve alias checking in PathResource
+ java.nio.ReadOnlyBufferException
+ Deprecate support for UTF16 encoding in URIs
+ Update to spifly 1.3.3
+ Update to asm 9.1 - Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
rewrite, start, unixsocket - Update to version 9.4.42.v20210604
* Fix: bsc#1187117, CVE-2021-28169 - Update to version 9.4.40.v20210413
* Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
client send data length > 17408
* Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
* Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
from deployment scan - Upgrade to upstream version 9.4.38.v20210224
* Fixes bsc#1182898, CVE-2020-27223 - Upgrade to upstream version 9.4.35.v20201120
* Fixes bsc#1179727, CVE-2020-27218 - Upgrade to upstream version 9.4.30.v20200611 - Upgrade to upstream version 9.4.27.v20200227 - Removed patch:
* jetty-annotations-asm6.patch
+ not needed when building against ASM7 - Upgrade to upstream version 2.9.22.v20191022
* new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
* jetty-annotations-asm6.patch
+ adapt to changed context
+ build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors - Initial packaging of a minimal version of jetty 9.4.19.v20190610
* This version is light on dependencies h01-ch4c 1697184454 9.4.53-150200.3.22.1 9.4.53.v20231009 9.4.53.v20231009 9.4.53 jetty jetty-jaas.jar jetty-minimal-jetty-jaas.xml jetty jetty-jaas.pom /usr/share/java/ /usr/share/java/jetty/ /usr/share/maven-metadata/ /usr/share/maven-poms/ /usr/share/maven-poms/jetty/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31060/SUSE_SLE-15-SP2_Update/73dc2cb7b69cca367d54661e0aa886cd-jetty-minimal.SUSE_SLE-15-SP2_Update drpm xz 5 noarch-suse-linux directory ASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract) XML 1.0 document, ASCII text exported SGML document, ASCII text P P P R R R |:k\7g utf-8 1c6fc031c50e91e7f880a3f804bcafe76643f0b37b17e2f256def50f7ce5c369 ? 7zXZ
! t/P8Z] "k%f+&s?ioͅA
[1 7xxF 0Ec'a>T@.\kf
d4SnnYg̖W[aO:N ca2}mRg5,; [=Np9cd`=XNZUV!D&5K/ ay!=~.8x~ a`qX @ euWW;E"p6 /lX^d՜ Nќ0B/5=
@G]p= ?!1&5Qf<әEpwSfHCXjGRBTq\Xufy/l$%Q(30
iT= kRQza"x2VDC6M8~PXN yX7&'6"?4!#9(YוJ5I=FwSN, x, BVл8gXh%xcƽ( wHBJ^4=ӓ\PG2kpOlp!!4"hU'
$׃49ZE`.?@,uBMS <2Ad |Y>3vT@o$ɻ]~ϳοa #i6?=G ox/_t8Sv+} 8i3vsx vݕ-J8VH=ߴ6<-w$ 4w17. 9ʵ!Ν+Pdgji$9@@t]`(.+kmʩ#ܤP.`QyN;T)}:DT6=]_?Lj
]3hXqP ˤ7%_JʴI 6iTj6@3FFh%^b1:ߊ
v*nF[") gq&4eZ gXL} {' eB;6Y* J::g Mҫ4_+:d
0I~]D1l&LdM W
6
ݮNw> u #7;fF 4 V q*O:@('֠,UAd=/sd7 =]W~ZԌ@0., *g 0#LO!ye.dٹo:۶Dp`;dAAP ~Y Uka|;T=Ҫ*K( h>1:>$R%"0Vfܠ)@Myf9~~ơ3NeAҗq*/d)N] .@\Rlxg5yF>
c?A\ SAQCIpf __x_\q]tbbyܽ7"~6#!}AbDP2}~ zVVAi;4 Ry O,.\ Ceƺ 3̂Q `wZO~cq* Ѥ R_q40WfLy ڍ@%I k#3LnHŤ' $OJ
s#*3qFg;P$\ЩBP݁ƛFܬ(BwTUQi$X8L˟\ƽ㍛Y&4J0QYx߇QL}d?̺qTSΚ(b/<%"qߋ4yI {7#_ ֜ugﺕ{$ 6O_'98 ,$|j}'ަ
Pe;>Thm'Vuۺ~F b)Ԋq;0a*_K-⥆>*>| ^sU| G /lHlvi:3Eea t3| bGQ 7.N"je&8ӠØcESi)ʺv }cb &P)f57*RAn#/Qwzg5.ۇRlT zFl;pN+v}`
e( ]~ʼn{1.w;0mr܊PD7z,H@2/b7cv5aFz pC ܬSVsT-;Jxzqub1_ =f[2X3b քq/srnR:JAiSd CJ`иLɝfc}>ʮµA| B+w >U]] ǀ^0DG4i(2:oTQy'-,Wèj و6*[=Q'zldFUfZr??ЏyN7DW J A"b~&
x=0y4vݞ sFa.?kH9+ +. ^B: zn{ykh/c=]7EZ
ek *X Y'jPx
E4
k $Y$F0s=c0v'IWhthexGKCFk0]Gܕ\ohEKpb@H7X97?y%thOf~%AgI
]g/{.v-o\huwR)ݫ8F'Ε\BPQۯXQy.-'颺Y+J!4ܛ4w&g
V oYT[pFJo/U"c>flc*#?ſe"USnB"pg
̂O43k"B-WVt,)Uk@x)nͺ^4k/:=&.E >+)KWFJ2ƒV#X!8|dEYI_mX_$su9z! qjv}Wy/<| r]TV7X*Sr;q +q|MB>e{n{jhϳD-H_Bӣ
Vc>%SDevjo& 2Fޣ]Vz!E<#eh+jr3DU2ie|;n@eQ,B3A/ayZ.i 0?9^:clZBjUT+ݝZWe9C/U;&mWQ˭8mf}]}l2T`0 snOiݞLӚAγ1Zu>vk/DfE)abQ-Ltex#V4,&f3둜ZA@O+5WD'{
-Qo/-/VW**9|SX.H哿c#JAZs-D Տ"qkR}Y7ؠk<"*ޓ=|+=Q*H`@V,[ EfOd' V%*,J0VJ =l"BMrT9fbZullcl~E zZ R )HjɚU.I` &%fgoA5Reitk 6 35_~f~)
,>1FbBm#|||-
D )Ͻz+-5j֑.
T=oJMH OF*PX壟7DZM#?XRuYss% 9ev&t ZN.H*D5a!d"( y'6" {d2*yt(DB9H3ZUp!<^6yuYѪ<#:IEahB:z 1紪P ?FFs8bVJj@
ffӸҾ9_$y䴄9;D-WQw 0X U}"2|Fh'X%sFA3tmu8H{,i I
U{Ep4,:)S4z0{NXٵOԩV;@kQ|AEÀI@wLB2hqJW;ܐG?@
a@W -ɍ!~ܷ9a}/ b#:Դ ,]Z8uN qŹ Q<.+IZǥ&-ȃC(a3v 4CG
C&R(Flj6O
)8t]fŚ ~
X8LGzN_ E&8ϳ?ʳV.l-
Igl^[8Mt*q4=Vȥ]#Um*/G>KqٻSCaaMwc{ܥp>dE1a->^9ucH)-fc3_1)sih"n։J!U:y9ډHq70·5NDJyT.;R7C\Anv7ZEUΜa!
|Jm&y)N#y
:Eu,k:&wZ1i F -b&`$/i (
SIa;^ϽFZF_d/\&aw
`h(_!hg kF$O 9~%E-'\@\Gr k!<۽f S 1eXU' :4'2
y ʳd%)XІj_눓SxImu4b_ ٭=
T.ʃJwEΠi;A=@>yRk;HPY6/%Rty^r<4bAc~IA !2{ѫG~ΤxBP:ប8&6z3tOo8 ľ4HCY sLON -ֱgІBo }[ G|z}{9W1L:KJ(^$zֶS-R#tq1e1ҬX֕^ &g4,%[z6\e )ϭRL+,,\JX$]i`Yq@Yb}GH?M5ѳfL At2u( D *ǗKořvz¶ Tz ]@( p YL/p1\w:j; nOd٦4 0DF/ ;o^1<؇U(0-$'IvZJmx @ k]7sˎ+m mioi4.Uky<{sI3gR=
)O%SCb 2)#1$}E!meO/ Pef$TɲeKn7E# K uQųg
!qN! <
T8]Jq_Bjqg O^ǀ˚~mHn$Lxm
Lכ1]7lԥBwaOǙ>2GWuu O9o
KJ9J9JRDZjֆ6?r߫cw[#j/@vLٱH A Lj
7KY c%hHcbͲA7#^NaENg (]MgU#Բf}R$ |ٯ@F B(ZR>AsL[k{Ў_v?7y{E("b;uP9=xC s7ґEg7{'SˎЍޝ7,[@ZGr
c3lb (A}=(ثNv
~婙!zr1 w9 [XqYҔadN;5"Ívr`= FIB( tD9Pl8IE
oY4EŕՊDl0OH"&kidvG_k oq]~l(H\- i _)^G"3s#ojE&I,Up$>廦vv ȡ6Թ$ Hh ݿkU / l2=Ab X9dԋjց S>@yMB
}є ~ig~)56882L2VTҷ(\MF.6\ L \NV e?_3QےkR- <=FC[2IBfKmV,s0DTE̮ v ݑ צ ՍŏI2fh?Q|ɐz_MX@*)NH: >Tu&=G)e ElZ
?chye@ݼa j t/vik$ ;w #I-i6>/fV9rKu VktUǖEKX:s[qgdcuNvImZ kO-U skYtE 8dԩ!M $5KH4)8ل{\#) vN GHؼDR ,S Tɍ 2S'Nd^MEx3{`LyYQZEQD6g`^>HPvd7k]2^$'l>[ؽQ J}Eew nѕ0K.T2e˰5[3z z鮈xN_3 lW8H4J0buK|z+ .SF 26D X\ѐ O,\rb2cMh}la;ŎX7ehq֎P,;]R!4?\A
O8,3W,")tH[wyzɀO+Y5hȊڷ)UjPvr)~teä0K Ƥ6&fx?6Nq5b1RRT\pEi /ئP[J < FBKTnݺ"r/ +wU>up0AWEd18gIbK`i Tyr.qx ޫ gB6&Q/,ܐ[b E
C2oO :3A-)yb/Kym}0\GQvA5x]r u o= BV8> X0}1
j\+n"SJTVbj۲G E!9f@E
3"M᷇g۬g7 u fa 3$ Z& 9 8w%R@T5]pDˈ^ZBu
?8l]$ߣ6Fa #^#zXd|*їjf8(`qpW
8
|o1P[ft
"#L~tuRZ| KLo $pɟnkjj nIGOy=_ijx{1YX =
kt1N5p+ӎ`iof˫zJ^XBp;[ b|o_썻4>3D ^dg.cZFPoj̊X>AX,X?ƑK#[v|? TmV) ךD앗U?O435ϣ)h_froǬG;Gf%ǹ
Ԗ nrݔX.EUdW*%u²Z(K(땎 :k*Wn{ p_ s*)eZk wz@0'$b'H/O!t5zyĂ.'Ol6 f\}4_=c i1qLN m NB,SiHRwu3l|Pe+yrQ_} @A
xGSĨ kD \^p"N/9E8@qĦwy# .ޑ)i~ Vc[L40ڮh stn2:V.d~kƗ+SyZGd$=#DpŨN_ 9ߔB4ozvC@auƑB v':§bZz
@*3gTbA$kEVFV(l5BǐbeIz\t`).uՓ ]ٶQWJ)T%ҜC4InY0 Q9cy7e&ט+8ܬR % #j1y|Z_!5m0O
M%B 4~38#/wqs6=MĠbpW1"ѲV4['Ce3 Qz>L*E2ȏ]!ߤo ԃv<:RGdk$}ewt MZ2tTJdkB2\ BUCBEcĔaIU[u`8 ߏxߟTڴ[\@z+>d^]J}oI=DV;?;HB#r.Y,&m_LY_VP[1")ٮt.%l`,HLEGkS\ Έ Ia 2B v Х%dKk:ޮ͏[1tqT"A'~_[(Bxih @XP˶boy)t=8S$ Ǯ]yڀrt~zTnj
O"Y1>c'rn}+D1b%B' EjƔ\{ٹ\N ônQ m8gAz';tBQ ^ڶ0 k^!Т4Ğ -A
DMN0&g
XP
KW c[G~Ns:p xT|B1*B=\Ub^})XX벋5J\mLiY 1>ĭUsE^ ZjS Ϫ 86P`el sU-2 n@L]Fi ew^mH
Ua"·;Y
B6t\x2@Ւj[ ^Pua
МC9GIݲ:AW}Tʫ(̹Wz<8YwK]GV\8% Q0ZtA'Hf Bo.ޤ>־,7kzn_Uh}ɶ;3A2OEPA t2<C$ xVS1߿h_4bS}NJҐ^BGmҴSv 6Rݹ(3CO&͊qEsUwT9S1vjլqP߇ $-r=\f`ePy
b/u} 58#<Zd?$(6I:LX/@tFxvB>ܶڢ( <>y$F s k#;P| ӓ;Nzb&JѨ[/K6;
s9ǥhty߇θξƖYEv?xgI^a\ 1/?0{~[RmP/ /y&:*}a zy Yy?+5VcAl'c^%X4fD$/Fk x j{5=嬥_%XZ|K0y|a_S)_:+5~;a
䛗XqZڱ.,~3ѩÇFG*{ ^W;D;#ѽZnCRa
5MFtb( /t*r]C̱0- KKVI.U
~oѕ @$haa۳qe2ҧa4 g]ær_1ڿ+/'nըm~lt{݅8m%[d$7Aܢ {YϨ# N
V?VH/&g VseR>Zzs%qVyJ>ىp!lY
]ʲ*5˫SbW"*|Cv 8O'2/~_[
3
Py>~6Z{
Ӏ1';+ q3ęVf\e5yu 3{?9/AH֡kH;;"Iz/B(zkGZusWT dt#KMky
Cn)z7
9Cv G8mĩh8NG`Ӂcٙ j`~bA @r:08 V ^C%CawZs`^FcԭtZ B枊LtbE*NHF4+0 ɏVl4`G=Z0G'z ч܁^8Bӈotf¢3"lP ] b$5 MC _zsH
Wȉj51 jㅱHaPip,H2&R()zn|8\Wcn_x`|o9 atBWh=8"N̎`_#4* ?,Xs@"-
mìT>ŗr7U"n;B-War82֩I3#oyy>-ix,|`WZYD0 FD|IJ@hw7L R`E 5!|ga fIA(-a: ҇>
6,v`\SAq 䈉!SAgY;#ðjmv}t7x`3 l uLCJ6q%%]N7m)4\(YT
-0AL)¶Wl