jetty-http-9.4.58-150200.3.37.1 < > , e ihp9|&r^&o2V%Bѣj lî-ʬo#C/QTf ʔaƺ8WeZ~Hv" AJӔN[*#ѼW rHѼNR|yoJ\Y#$mqDKWlfue7
t&A01z_0V
.L
`FjwN@ ՜{hJ;A)<,%Qa!+e-r㧳wo&Z > > +8 ? +( d
" < ! B X n
< P ( 8 9 t : h F & G & H ' I ' X '$ Y '4 \ 't ] ' ^ ' b (F c ( d )w e )| f ) l ) u ) v ) w * x * y * z * * * * +$ C jetty-http 9.4.58 150200.3.37.1 The http module for Jetty
Jetty is a 100% Java HTTP Server and Servlet Container. This means that you
do not need to configure and run a separate web server (like Apache) in order
to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully
featured web server for static and dynamic content. Unlike separate
server/container solutions, this means that your web server and web
application run in the same process, without interconnection overheads
and complications. Furthermore, as a pure java component, Jetty can be simply
included in your application for demonstration, distribution or deployment.
Jetty is available on all Java supported platforms.
This package contains The http module for Jetty. ihh03-ch2c XSUSE Linux Enterprise 15 SUSE LLC Apache-2.0 OR EPL-1.0 https://www.suse.com/ Productivity/Networking/Web/Servers https://www.eclipse.org/jetty/ linux noarch
A큤A큤 ihihihihih 0b059793e9268d071bf8c2ce26e7da5f8926b4145ec63ee86459f26018e22f12 29379d59cbc1429afbdca16500506e337e90e01a6b3ce787b40df0ca9609d51e f64d6da0aeeb994b1efa31fac44b08ba0c56bf75d923ac01354955c015ac1868 root root root root root root root root root root jetty-minimal-9.4.58-150200.3.37.1.src.rpm jetty-http mvn(org.eclipse.jetty:jetty-http) mvn(org.eclipse.jetty:jetty-http:pom:) osgi(org.eclipse.jetty.http) @ @ @ @
java-headless javapackages-filesystem mvn(org.eclipse.jetty:jetty-io) mvn(org.eclipse.jetty:jetty-util) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.8 9.4.58.v20250814 9.4.58.v20250814 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 ih[h4Wg1g@g@gY@ee?e'd^@djdS@cGb @bBb9@an@`i@`i@`ٹ`@`f@`KW_@_^@^]߶]X]d@fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com shvetz.anton@gmail.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com dimstar@opensuse.org fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com shvetz.anton@gmail.com fstrba@suse.com rpm@fthiessen.de fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com - Added patch:
* jetty-CVE-2025-11143.patch
+ upstream patch fixing bsc#1259242 (CVE-2025-11143):
Different parsing of invalid URIs - Upgrade to version 9.4.58.v20250814
* Changes
+ #13461 - 9.4.x HTTP2Session cleanups - Addresses
CVE-2025-5115, bsc#1244252
+ #13261 - Improve handling of failed HTTP/2 requests
+ #461 - Move ServletTester to the test source directory - Upgrade to version 9.4.57.v20241219
* Security fixes:
+ CVE-2024-6763, bsc#1231652: the HttpURI class does
insufficient validation on the authority segment of a URI
+ CVE-2024-13009, bsc#1243271: Gzip Request Body Buffer
Corruption
* Changes:
+ #12268 - IteratingCallback may iterate too much when process()
returns Action.IDLE
+ #12648 - Backport improved handling of bad Gzip content (and
Gzip Exceptions)
+ #12532 - Backport of deprecation of UserInfo on URI (in
violation of RFC2616 spec) - Added patch:
* jetty-port-to-servlet-4.0.patch
+ Fix build against the javax.servlet-api 4.x - Package the infrastructure pom artifacts too - Fix the Group tag for jetty-server subpackage
- Clean up spec files - Upgrade to version 9.4.56.v20240826
* Security fixes:
+ CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote()
vulnerable to remote DoS attacks
* Changes:
+ #12201 backport ThreadLimitHandler improvements from Jetty 12
+ #11938 - Updating URL refs from eclipse.org/jetty and
eclipse.dev/jetty to jetty.org (including XML dtd references)
+ #10805 - Jetty response with an invalid HTTP2 packet if the
client set the hpack table size as 0 - Upgrade to version 9.4.54.v20240208
* Security fixes
+ CVE-2024-22201, bsc#1220437: HTTP/2 connection not closed
after idle timeout when TCP congested
* Other changes
+ #1256 DoSFilter leaks USER_AUTH entries
+ #11389 Strip default ports on ws/wss scheme uris too - Do not force Java 11 to build on i586 - Upgrade to version 9.4.53.v20231009
* Fixes of 9.4.53.v20231009
+ CVE-2023-44487, bsc#1216169
+ CVE-2023-36478, bsc#1216162
+ #10679 - backport HTTP/2 rate control from Jetty 10.0.x
+ #10573 - backport hpack improvements from Jetty 10.0.x
+ #10546 - backport jetty-http Huffman encoders/decoders from
Jetty 10.0.x
* Fixes of 9.4.52.v20230823
+ #10352 - Jetty accepts "+" prefixed value in Content-Length
(CVE-2023-40167, bsc#1215417)
+ #10337 - SizeLimitHandler does not enforce 0 responseLimit
+ #10169 - make sure that a ServiceLoader is retrieved before
iterating
+ #10066 - Allow SAXParserFactory or SAXParser to be configured
in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh
workaround
+ #9887 - Deprecate CGI Servlet (CVE-2023-36479, bsc#1215415)
+ #9716 - Deprecate PushSessionCacheFilter
+ #9660 - OpenId Revoked authentication allows one request
(CVE-2023-41900, bsc#1215416)
+ #9476 - onCompleteFailure called multiple times - Reproducible builds: use SOURCE_DATE_EPOCH for timestamp - Update to version 9.4.51.v20230217
* Fixes of 9.4.49.v20220914:
+ #8578 - getRequestURL can append "null" if getRequestURI is
unspecified in an authority-form request-target
+ #8493 - Review HTTP client feature setRemoveIdleDestinations
* Fixes of 9.4.50.v20221201:
+ #8774 - Added SizeLimitHandler
+ #8678 - Jetty client is not responding to GO_AWAY packet
received from (Jetty) Server and continue to send traffic on
same connection
* Fixes of 9.4.51.v20230217:
+ #9352 - Update / Fix CookieCutter
+ #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
+ #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
bsc#1210621 - Add _multibuild to define 2nd spec file as additional flavor.
Eliminates the need for source package links in OBS. - Force building with java 11 on ix86 in order to avoid random
build failures - Upgrade to version 9.4.48.v20220622
* Fixes
+ #8184 - All suffix globs except first fail to match if path
has "." character in prefix section
+ #8145 - RegexPathSpec backport of optional group name/info
lookup if regex fails
+ #8088 - Add option to configure exitVm on ShutdownMonitor from
System properties
+ #8067 - Wall time usage in DoSFilter RateTracker results in
false positive alert
+ #8014 - Review HttpRequest URI construction (Resolves
CVE-2022-2047, bsc#1201317)
+ #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
parser
+ #7947 - Improved PathSpec handling for servletName & pathInfo
+ #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
bsc#1201316)
+ #7918 - PathMappings.asPathSpec does not allow root
ServletPathSpec
+ #7863 - Default servlet drops first accept-encoding header if
there is more than one.
+ #7858 - GZipHandler does not play nice with other handlers in
HandlerCollection
+ #7837 - Fix StatisticsHandler in the case a Handler throws
exception
+ #7809 - Jetty 9.4.x 7801 duplicate set session cookies
+ #7748 - Allow overriding of url-pattern mapping in
ServletContextHandler to allow for regex or uri-template
matching - Upgrade to version 9.4.46.v20220328
* Changes
+ Option --write-module-graph produces wrong .dot file
+ ArrayTrie getBest fails to match the empty string entry in
certain cases
+ Interrupt flag is not always cleared in between requests
+ Gzip compression not working for multipart/form-data when
added to the allowed list using addIncludedMimeTypes.
+ Miconfigured headerCacheSize in can result in
IllegalArgumentException
+ HttpServletResponse.encodeURL not working for URLs starting
with ../ - Build with java source and target levels 8
- Fix javadoc generation on JDK >= 13 - Make importing of package sun.misc optional since not all jdk
versions export it - Splitting the jetty-unixsocket artifact into a separate spec file
in order to avoid extra dependencies for the jetty-minimal
package. - Update to version 9.4.43.v20210629
* Fix: bsc#1188438, CVE-2021-34429
* Changes:
+ Improve alias checking in PathResource
+ java.nio.ReadOnlyBufferException
+ Deprecate support for UTF16 encoding in URIs
+ Update to spifly 1.3.3
+ Update to asm 9.1 - Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
rewrite, start, unixsocket - Update to version 9.4.42.v20210604
* Fix: bsc#1187117, CVE-2021-28169 - Update to version 9.4.40.v20210413
* Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
client send data length > 17408
* Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
* Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
from deployment scan - Upgrade to upstream version 9.4.38.v20210224
* Fixes bsc#1182898, CVE-2020-27223 - Upgrade to upstream version 9.4.35.v20201120
* Fixes bsc#1179727, CVE-2020-27218 - Upgrade to upstream version 9.4.30.v20200611 - Upgrade to upstream version 9.4.27.v20200227 - Removed patch:
* jetty-annotations-asm6.patch
+ not needed when building against ASM7 - Upgrade to upstream version 2.9.22.v20191022
* new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
* jetty-annotations-asm6.patch
+ adapt to changed context
+ build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors - Initial packaging of a minimal version of jetty 9.4.19.v20190610
* This version is light on dependencies h03-ch2c 1773037800 9.4.58-150200.3.37.1 9.4.58.v20250814 9.4.58.v20250814 9.4.58 jetty jetty-http.jar jetty-minimal-jetty-http.xml jetty jetty-http.pom /usr/share/java/ /usr/share/java/jetty/ /usr/share/maven-metadata/ /usr/share/maven-poms/ /usr/share/maven-poms/jetty/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:43078/SUSE_SLE-15-SP2_Update/a8f464d19a81ea1de0a5be8421554026-jetty-minimal.SUSE_SLE-15-SP2_Update drpm xz 5 noarch-suse-linux directory ASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract) XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines P P P R R R R nn I0# B utf-8 aa2458b33bf686e4993e37f588d138a8dffb55b57779c934da75bd70e9f584c6 ? 7zXZ
! t/J6] "k%= lJEWW:u^pg|З[Ik+sxAִ" t xL*
F ; a :=~m*ZBFp9'JxA}vKjz@
tLE:
rftƓ{lHW ~rj|4v*qn(nc5HY,7A?3dT.QFj(*ۘ#ր #gT@3`Òl:QP ̕-)mNKU d J[4d)% FlY]C^.ٹ2n}Bn8`sق;#LasZ<؋D_t>ߞ%bp U6Gϥ*mU]A* C؏x關gG($aV |ܴm
JKC
Trj`R005e2 %n#WGbZb3ሾh}ݻ\,"q.5HLo6Aʓe4vۭ4tbo:/nXcg,N ʌ㥆Yܙ0aglp2RC5PqBdppx\V.K]m-MϢ˒ī H Cec:D[vo˯12ucwax!<--]] T߂Xm-WO(`?mr-`fӅWJ{'dLBL^ q}af[-uF!Vχi.@?jܞGl;L ' QPq5:rj̀?o]TO73l(P4 w@
L^"/b;uo GӫH_"´Yb͡e3cu[ ΑA8Z#=@zFGƝzdz^pl`Uh`r]jnBYܞ`YF PP}Es%#+h;;GᓀٱX-Mw͙FpO7në-+55[Xxl8aX Itg #a[
.=|T/0n+C@[Wxu@uիd'D4PD4s &o jul``}FO PT2}H+8*Ĕ
S7
LQsR+u\05ni3-;746(|| ([ѝ1]p,/0}}s'/țn9ܲkBߧ]v>
'mz荥rn/x < <.̷PK]2jqj-̨J kukVF~rBqa )ʭu8=m xt\
jaS"h3Iw9h [j{)K]MqTi'u;bTQ4d_ a6v @6ʎFQPʃa:S<ׯˌfd
p%ŕxz @aw./Oc-U^f,S^59um=п3!W_Ftʗ"\٢UC+O I _aOY#Fd^+g$mL:n590ݑn Ɂ^K+% 5Ѝ|lb쿐8?V1hC9-,.V
(j;QryChf#uG [B[PjD³%R>ݻO/Qdq[R|F9S␁F;7'1 R)R?}Bjt%q+9E^tUOK k3H Da+.0{
O|ztx3ͨY8(] GO R 4́O~JeON}&^w 0nƸ"6߰ u b|AY@\~]N7e7Hψt*wD /%[87
q )Ezg\8BRw`Ш,Km&&6z,Kۅ[֊B3@z?87줴f&6ţ/[~]Rؖ^KTX7 ೠ jvhENj61ؚeOJB] LJij98W91Bf_q=Nf#vs8Y_dV??ŘϦX'$| ?ؘ%i
,QXdXZͰF: ĞZAis87e3
Vqw/9]Axg_mٶ rZM kB^ۊ/hnnj-W"BV7qjl)@Jq5 pmH %p
ϫY! <:9k6^d#8C4h3_`#X J#f(*ӫg4UYbH
nQYZ*MXAmq& h8pw8ﲖh%;9JY`a,m1c\N 3(3DN Q֗ ".
SF_ (lTHAᤉMƉհDZ{3w ,_^FƀHWV~ϵ"
7ppĪLI9xtzRd ytaP~;+s{^q68 1Ӹjx,@|
?(ӑn2諤 "K 7:~SKoy!!'rnZ\D`$
0@'i! n.!U9T VO,?зpi %Q a* }# 8K#+@ zoSiԊD?e
Y7juK8ÇH=Ha,CPX ? d@9*qNwQ0\Vs&uwgYUDyg&oóc26y! .M2߾N`# BiM;xX^:"}ڤ 9! G[.O$+U1l<}hШ'ph=YYԻGn2?V$˞}&%?sII&sY>86<yP1[uW6-* lx/y\\^WF4^1O/>}$ 7S2B LM՝ QB9FmA9HO\6 R #o-n;ij@ -] M`RCmT0;]L۽|, >`c>W/0:X0Dܵl 6U.6$ !}q7QmHZ&_8RW:vV ڔhvOʷCWS
FўP/c.IG\0=Gq"l/N{@}Ե1퉔c
2P6cGpHGFGVd̓z=SGTgr eXJ6R ^RwrS_Ģ7fG$Uڌ Qo?e.ɵZIB< FH.~(d >SDtm
" X60ABa , OIm1ʕzD 9XɢdZYNZtt9 !;@6AοyΠ)3+'C(~MLK%gG"x
Q ˳ܺ;0agTr P#e6!F)}̊(jxzy#!-Lc:c й^ R'Pr}xL 6fnʔY@_4V|BuTݞJ!佛'*Q
"˃k4&c'Í2 2hr\[,ɒ5W9p .V
I^Oa羚u#-+gr<> RGWSۖ=ʬKsYy{Fe/ ۃXw 5?fGĒu8 ϚL0Nhor|Os_ 8
x)AX\zp;VjF =,}%h /[E! 7+Қd:ӭ\<-]9\>@ q Q3z1W/.(ÚEcsqb~"= Ftyr uWң&+`>yI= Yq4UdtXyўI Kg9`jL@L84Y1.
8bBW ɬ5U'
Wx`&VQ$S&it!\lPBlD4i[ q3UR L1)xʊ3d>
kYU$xHycڎ}ZͰ
KfmfJA&IG >@M@Wk8 kL(HNr+$ѸwW=H`DJA**#/#% o8h|W߲
D_ ( ?Y}U՝}4h
j@Եh eFC/))IHF3<\+w " 6' * [KbC
|2M }G|;b0 cY G d\.H&vS%0#u
>cJ@oJv(OW)"³)h }Dv[hH%
q4Pm |eC+5o#t ' .7Qw, A-\6PovwIiǞ#G8CNl4G_4X[UJ1 yD
--roѽ) ):n{M]Gm,_TO v: 0x GA$רLX4>lH2bO@DT`-h/p ̟HX\=9V`jpЏd7"egz:ʢ@)P%Φm.~H]zM{ì]Xq,2ڪ?`HzjpI- (q%K63qAJF`_!;W] T+Q͊^OS7fQ]X=:=߰B ;[ZY
25|
93g>gz + Hil\71_yd wt%o ؔ,R; ^l_ D۳Y!Noa;L(#*C9"9jDl _ | o$t y\`'Cg@vG2wg(BPC#krD35%Ջ&#PPTpAΒͲWBvَK\(3#2UiFc#J.wy| 'Ő9J!fEw,sSB+$XqE$}O`Ν6F>pfUPfhnj#>V[<~Q .$$?7NX ^0e;y-CӟN[e
4v:X/B'WIr)_(nx3|H`%ڤaLX>/nIc AbB:G_kytp4}ʊI z@s_4#9T/p?ufSH,VK9t,\614_#I&
X82OJJsш|O' X#G^iu.R2Lus0AC9 ?;f# VH|9S b@w1%S:颲9sQz: ԪE|x]ʁa-Ѳ? qtwy]2 JBtOlc{]W+Nt]ɳ 60e/7ݳ%G˙.q$[ПC0tv `4a;^-'F\Hj]Ʃy0ea,aCߡgH I)p9%+cJ"D\#:# ⼽,7{Cu=r@Gֱз%jê5n j&,jh}^&3OCv- קj8p2hȴ[ߎuD Tt `=bqfsQK^ u$ p6&!P"Yy\MZGYփ^fHBEeNO& jʄˇG
fݹ%[ZF?G~O$(X#dݕf?2E NlIigk 2H e+` t2=F;( OaA3E,0"U-(DLheWT$Ң;?^uPtKKhv t{xab1S oנîa@o}`I0}u{ ^b y9| znP jÑffsґ9^Yܳ$R;ng ?|1=
x5cjq D.xZ yJj>9AaJ7äR' ƻ X3,;+UwO iA.m YJee/gV1-1VQV{/q&9>i
ļpWkZ
) 5>`mrOOnEUOg rcv#|Ƕ_+wRKh74 b#FNA
ZD3Ce[gǹѣ JNl+ԯPg|Z=6 LTa|r-%Ԇ
_+LЇL?]D ]
#s:ǫX!&m?؛,wJ9%Γ@ [*#YLS٧3~zs~+Γ-QܟYLCKkD;e{I z,{ȼM9[&ƙ*ΕY6(PT\s]c8';O\d@e!ovA r;%[4QmÌweWSǡ "2hP+A|
r -e]5r9*|b mԘW'{7 vd
Vwk /)ǭp МkY 13 n+iqFl'~g^y|azk]ajpb9)J (}
fC8g$H=y!t t [G+*-|H,ցK] ߿k'nĝOH~qV*̾6{9FJP 0X$o-cC ),+Jke!@ĜEQn/X%QlA)*PQ{>.5c""Ju(Ieê[3&e@zhC/ 2Vl6Zn9 mtʃ݇Q prw ~M@0x7p 醺Ȭ8X C @ |C6$Se$}3% | ^-r HNz .x4d/K\O ҈,tV<|Qq]V sP8KEd2R(☏k3cigg jJh0 Q&%[h ~ s+ %bv@@b~t3S 漐{]o>!K8LO,@lgȸJuU~?A.b+/?'! i /R ^CG"vDܫQ#yk _R%cy+J}L1l{ڑ6~tZB.,u7iO< yvpVws(Fp^2= 5:H ð[xg1sGb'MꪜY!ǕβN$yp9ͽ +P\ǯSЖ80%f#>?ދ#pֳ3 R-\C@XY%o3,0!4B Xp&q6 u?>%s^h?Cl .@k*vw w+&:`/]|ց;&f$Exl8$٪NX%θ$uW1z ~o ^Z ѐʪ*8{VD-(8h"=S.ujVW3>mFrT<0(,݄K C9J;
JG7G'{(jNpiqhznb'9JnS\
'b'Ĵsp&N,;c)GB1_|.=ZERs9h4-BPXn©B9ȟ b480lҬDUp JCoF
$Z: IEبpUv( W7
_KjYw|Zv-]F+uԤuR-#{ |dM_nu_x]H 䤁S H]LВk{mJj\QCO]6f`';-.0R~f>3#d1
D*ܕv&ʓ/p5ӖlYLH`\&G]xM.$?ad3vSA."э(?EH>]7 P6s
s_)1kٿl 9^%A^֚ =U0桠=mLaѤ!ӴcXqbY&kG4q4d t*g
$=* &ZO٩sJ;~{HG_'y8ȾT@7-F:
]ffޱ )^Íz? W4ϾX4٨HQayt9m:vZPJh(GfgɢE=2pe
^;if+
ݺH>Gfb\J`D
@|!. Ä/Wkt<:rQg c(15NhB`'
4wlVs5B´+ΟuRO[
Yq9 > Ro{UK6~ ]|@d b_㮓խMmz^AX`ϐ tKR"ۛfX@9/{M_R/! !Gc9'#΄q,]AS3,O;{zv 6Uri >vؘN3l Zu[] } kIrƠGUxsLԣ=gʩf̦^4WͽR{H:J3ŋ"~ Xuc~^y)ŀX349Џ4r(,ZP~ Qe\GX0ق/8 :wM={nU"oQSC#hDmZ
HavDGv/\w0Bicg73NL}茗Sw,H ߈f]lX¬7"*v-fVt^>#ZE/*0
w!m #p J{6G3[ s6Yi(> je
pyovQK C
kvNߡ{ U崸
2g#{tMn8A" Nx~sTٷ=-*nۖ[{ A>տ~HM"X d@>[fx r ni6{ a%b
}3$rhuWKտQ*
+$֛ MZDѠ~>ݿWD3< -k|Sp*d~4jy/o37h$ʺ(I }㘫Wg>>m 9}# LibM"Ui
-reU0pru.%H`)(kS^AOw.ְU&xV3ng)nٱ!&F<2ϖ/ytΆ\cM_@_Àj-Hiѓ"1:
+3uFQ;z*'_ X6kNz^irφ?ڦTomdA
mƻiQ}
Z Vl+$R