jetty-websocket-api-9.4.58-150200.3.37.1 < > , 3 iip9|l K )ƞC- TϛjV<267דeWM2[iZo?͋,^ n;ܺThM6kt2F&2\~?Z{-#8οd&B _Av9N֛%}aa iec"@i,LHz@0 *ZcÍXSȓ[='
=urGέ
Z; oZNc*(db"D`ݥT > > # ? # d + N % + 4 H R
\ p 5
< P i d | ( & 8 0 9 : F G H I X Y \ ( ] < ^ b ! c ! d "F e "K f "N l "P u "d v "x w #4 x #H y #\ z #p # # # # C jetty-websocket-api 9.4.58 150200.3.37.1 The websocket-api module for Jetty %{extdesc} The websocket-api module for Jetty. iih04-ch1d SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 OR EPL-1.0 https://www.suse.com/ Unspecified https://www.eclipse.org/jetty/ linux noarch P bA큤A큤 iiiiiiiiii 58a01799bba9ea73de7eeca44d2ef0a9432e54840fad9f2eea0d6d364beec689 653b069ca73a5b98c1d318aa1c3c5bc6e0bbd316a5083b27d808c9004e6ca72d d1e862bfa552785ec4140e310ae64e5545bc208c53d8ee244ceacdc5901649ca root root root root root root root root root root jetty-websocket-9.4.58-150200.3.37.1.src.rpm jetty-websocket-api mvn(org.eclipse.jetty.websocket:websocket-api) mvn(org.eclipse.jetty.websocket:websocket-api:pom:) osgi(org.eclipse.jetty.websocket.api) @ @
java-headless javapackages-filesystem rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.8 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 h[h4WgY@ee'd^@djb @bBb9@an@`i@`@`f@`KW_@_^@^]߶]Xfstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com rpm@fthiessen.de fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com fstrba@suse.com - Upgrade to version 9.4.58.v20250814
* Changes
+ #13461 - 9.4.x HTTP2Session cleanups - Addresses
CVE-2025-5115, bsc#1244252
+ #13261 - Improve handling of failed HTTP/2 requests
+ #461 - Move ServletTester to the test source directory - Upgrade to version 9.4.57.v20241219
* Security fixes:
+ CVE-2024-6763, bsc#1231652: the HttpURI class does
insufficient validation on the authority segment of a URI
+ CVE-2024-13009, bsc#1243271: Gzip Request Body Buffer
Corruption
* Changes:
+ #12268 - IteratingCallback may iterate too much when process()
returns Action.IDLE
+ #12648 - Backport improved handling of bad Gzip content (and
Gzip Exceptions)
+ #12532 - Backport of deprecation of UserInfo on URI (in
violation of RFC2616 spec) - Upgrade to version 9.4.56.v20240826
* Security fixes:
+ CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote()
vulnerable to remote DoS attacks
* Changes:
+ #12201 backport ThreadLimitHandler improvements from Jetty 12
+ #11938 - Updating URL refs from eclipse.org/jetty and
eclipse.dev/jetty to jetty.org (including XML dtd references)
+ #10805 - Jetty response with an invalid HTTP2 packet if the
client set the hpack table size as 0 - Upgrade to version 9.4.54.v20240208
* Security fixes
+ CVE-2024-22201, bsc#1220437: HTTP/2 connection not closed
after idle timeout when TCP congested
* Other changes
+ #1256 DoSFilter leaks USER_AUTH entries
+ #11389 Strip default ports on ws/wss scheme uris too - Upgrade to version 9.4.53.v20231009
* Fixes of 9.4.53.v20231009
+ CVE-2023-44487, bsc#1216169
+ CVE-2023-36478, bsc#1216162
+ #10679 - backport HTTP/2 rate control from Jetty 10.0.x
+ #10573 - backport hpack improvements from Jetty 10.0.x
+ #10546 - backport jetty-http Huffman encoders/decoders from
Jetty 10.0.x
* Fixes of 9.4.52.v20230823
+ #10352 - Jetty accepts "+" prefixed value in Content-Length
(CVE-2023-40167, bsc#1215417)
+ #10337 - SizeLimitHandler does not enforce 0 responseLimit
+ #10169 - make sure that a ServiceLoader is retrieved before
iterating
+ #10066 - Allow SAXParserFactory or SAXParser to be configured
in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh
workaround
+ #9887 - Deprecate CGI Servlet (CVE-2023-36479, bsc#1215415)
+ #9716 - Deprecate PushSessionCacheFilter
+ #9660 - OpenId Revoked authentication allows one request
(CVE-2023-41900, bsc#1215416)
+ #9476 - onCompleteFailure called multiple times - Reproducible builds: use SOURCE_DATE_EPOCH for timestamp - Update to version 9.4.51.v20230217
* Fixes of 9.4.49.v20220914:
+ #8578 - getRequestURL can append "null" if getRequestURI is
unspecified in an authority-form request-target
+ #8493 - Review HTTP client feature setRemoveIdleDestinations
* Fixes of 9.4.50.v20221201:
+ #8774 - Added SizeLimitHandler
+ #8678 - Jetty client is not responding to GO_AWAY packet
received from (Jetty) Server and continue to send traffic on
same connection
* Fixes of 9.4.51.v20230217:
+ #9352 - Update / Fix CookieCutter
+ #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
+ #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
bsc#1210621 - Upgrade to version 9.4.48.v20220622
* Fixes
+ #8184 - All suffix globs except first fail to match if path
has "." character in prefix section
+ #8145 - RegexPathSpec backport of optional group name/info
lookup if regex fails
+ #8088 - Add option to configure exitVm on ShutdownMonitor from
System properties
+ #8067 - Wall time usage in DoSFilter RateTracker results in
false positive alert
+ #8014 - Review HttpRequest URI construction (Resolves
CVE-2022-2047, bsc#1201317)
+ #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
parser
+ #7947 - Improved PathSpec handling for servletName & pathInfo
+ #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
bsc#1201316)
+ #7918 - PathMappings.asPathSpec does not allow root
ServletPathSpec
+ #7863 - Default servlet drops first accept-encoding header if
there is more than one.
+ #7858 - GZipHandler does not play nice with other handlers in
HandlerCollection
+ #7837 - Fix StatisticsHandler in the case a Handler throws
exception
+ #7809 - Jetty 9.4.x 7801 duplicate set session cookies
+ #7748 - Allow overriding of url-pattern mapping in
ServletContextHandler to allow for regex or uri-template
matching - Upgrade to version 9.4.46.v20220328
* Changes
+ Option --write-module-graph produces wrong .dot file
+ ArrayTrie getBest fails to match the empty string entry in
certain cases
+ Interrupt flag is not always cleared in between requests
+ Gzip compression not working for multipart/form-data when
added to the allowed list using addIncludedMimeTypes.
+ Miconfigured headerCacheSize in can result in
IllegalArgumentException
+ HttpServletResponse.encodeURL not working for URLs starting
with ../ - Build with java source and target levels 8
- Fix javadoc generation on JDK >= 13 - Make importing of package sun.misc optional since not all jdk
versions export it - Update to version 9.4.43.v20210629
* Fix: bsc#1188438, CVE-2021-34429
* Changes:
+ Improve alias checking in PathResource
+ java.nio.ReadOnlyBufferException
+ Deprecate support for UTF16 encoding in URIs
+ Update to spifly 1.3.3
+ Update to asm 9.1 - Update to version 9.4.42.v20210604
* Fix: bsc#1187117, CVE-2021-28169 - Update to version 9.4.40.v20210413
* Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
client send data length > 17408
* Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
* Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
from deployment scan
* Improve handling of unconsumed content
* Jetty start.jar always reports jetty.tag.version as master
* HttpConnection.getBytesIn() incorrect for requests with chunked
content
* SslConnection compacting - Upgrade to upstream version 9.4.38.v20210224
* Fixes bsc#1182898, CVE-2020-27223 - Upgrade to upstream version 9.4.35.v20201120
* Fixes bsc#1179727, CVE-2020-27218 - Upgrade to upstream version 9.4.30.v20200611 - Upgrade to upstream version 9.4.27.v20200227 - Removed patch:
* jetty-annotations-asm6.patch
+ not needed when building against ASM7 - Initial packaging of the websocket submodules of jetty
9.4.22.v20191022 h04-ch1d 1773037984 9.4.58-150200.3.37.1 9.4.58.v20250814 9.4.58.v20250814 9.4.58 jetty websocket-api.jar jetty-websocket-websocket-api.xml jetty websocket-api.pom /usr/share/java/ /usr/share/java/jetty/ /usr/share/maven-metadata/ /usr/share/maven-poms/ /usr/share/maven-poms/jetty/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:43078/SUSE_SLE-15-SP2_Update/a8f464d19a81ea1de0a5be8421554026-jetty-minimal.SUSE_SLE-15-SP2_Update:jetty-websocket drpm xz 5 noarch-suse-linux directory ASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract) XML 1.0 document, ASCII text XML 1.0 document text P P P R R +?Za/*XL0_ utf-8 1d676ee47bbc580a82f4519f4b26f75db16808f6e246ccec7f550198528663be ? 7zXZ
! t/ ] "k%L lJYyNF?5s4+S٪kZiaGc
3>G+4CB֟霖 mښI@EA^I2ǓmYI:c53=EzZl`mm 51D;U[Au6F4$F} K&CT :c,mdw}*eԺS/[H?SskcU@FU R~**Y`u + V\ġ4ayEk,AݯH>ǰI{L_ǦXP*ci6CK5vΫ#p=I̙Y3{eVqjc@mG&a]PoPVXkNGؤ1y9Hv>p2`pWw2g]KRTD] Dx0FHK&
i^2U96 9ko N @ 'z&̦ Hcf&!
1z c
r/,p>ղMXn/G'̠)6kpentC￥r,schk
;[H 73YoT+> 9[{EO~{q,:#6?dӋJ 7גS ƓW~uOOCC%G@s;؇RfA@Y'tPg#O~KD˩&cnV.Y'tZzIw@%
JK .]g=g}uMqnSa
~6 X3\ 'h
J&z%sմjXSQh|G}ݍ-/bԆJp8 z;\ųw/9m۟ O n"-yHύT&
U(X'j܌ l<Ζ̙E \\-$`7nujoS O_a @ $q)-~ $QtCo; PQqA%:{(-P qzOvm\S&tC,RBBJɸI8q.Q /Z}a ejY%L +]nݺckҥAf^ lh>d$;PeҌUY[U}>2(9 3
z6}qÛ9OȎ0_
K乫 )\vƆbtA:ê!sybGC7؎z8u"<Ďլf9V@^ ϩ̟Ab%0+qM02!vfL2EgY?o+%h;G<ֺ0Lp;A>B].y']
ER/wB1GORKs'9z0 qٗ6vL\Fu6mAӛ D Tf}JBi0Dr dv+ `i4' t 2tzKv=YƚD
3p-:`+$E5*' 2 t2
ஓqQݕ֚G=TTZnq?~ "
XY}okwȃ7QI7 Yߥ0hs#AѺ^cism2ũyJm
3b°wƯet=~RQvv
q0?`Z^`zFR3w)i@ K
.j&,:m:" Ϙ.ȧ
m/riP
hTUav[z8= 1@qzlSC$khO'a2HN$jkS2L:5*T^ 8?=ۆ4t2d~0>j.ـhꛮ3#R9("߬@tB 9H! ѡ@ ^]iz-w$:MCLoP B=-[C@t)qSXY7մ|ť$_|Eg nw-b3+UiasaFPAu
c lY0}DҨ-SY|QP%~zC+>/ ڲk5هSu}L95JZ(A\VSeSod~g pG]LWM s68ݲ(V>b(>~ p֕{c4H&zqqN
Ů ` j7 :JU) X>bq!ʈ%&m<bm|x=l/^z>|7]e3?3zc!MB"ȳoΧ$Ֆ^gY@[lUoh,D? O{4WVC73>/nԮ(1P# \w@~fʪkKXS~JKqP =b9}eg,١-=#HFW** CN4x*'k:*. Q'6g8PӖԪQ4 |ڔKMGYg1jp۫< }^䅪דU:A>(g-
̽s [_;Y@__K%e-JgEZympM_r` ɸC^9A }
S6~Hь3[| [lC
r