Skip to content
Commits on Source (6)
Show whitespace changes
Inline Side-by-side
VERSION.txt
View file @ e8f297ed
jetty-9.2.25.v20180606 - 06 June 2018
+ 2114 Fix NPE in JettyHttpServerProvider
+ 2135 Android 8.1 needs direct buffers for SSL/TLS to work
+ 2529 HttpParser cleanup
+ 2603 WebSocket ByteAccumulator initialized with wrong maximum
+ 2604 WebSocket ByteAccumulator should report sizes in
MessageTooLargeException
jetty-9.2.24.v20180105 - 05 January 2018
+ 2065 Backport #347 to Jetty 9.2.x
......
aggregates/jetty-all/pom.xml
View file @ e8f297ed
......@@ -2,7 +2,7 @@
<parent>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-project</artifactId>
<version>9.2.24.v20180105</version>
<version>9.2.25.v20180606</version>
<relativePath>../../pom.xml</relativePath>
</parent>
<modelVersion>4.0.0</modelVersion>
......
apache-jsp/pom.xml
View file @ e8f297ed
......@@ -2,7 +2,7 @@
<parent>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-project</artifactId>
<version>9.2.24.v20180105</version>
<version>9.2.25.v20180606</version>
</parent>
<modelVersion>4.0.0</modelVersion>
<artifactId>apache-jsp</artifactId>
......
apache-jsp/src/main/java/org/eclipse/jetty/apache/jsp/JettyJasperInitializer.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
apache-jsp/src/main/java/org/eclipse/jetty/apache/jsp/JuliLog.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
apache-jsp/src/main/java/org/eclipse/jetty/jsp/JettyJspServlet.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
apache-jstl/pom.xml
View file @ e8f297ed
......@@ -2,7 +2,7 @@
<parent>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-project</artifactId>
<version>9.2.24.v20180105</version>
<version>9.2.25.v20180606</version>
</parent>
<modelVersion>4.0.0</modelVersion>
<artifactId>apache-jstl</artifactId>
......
debian/changelog
View file @ e8f297ed
jetty9 (9.2.25-1) unstable; urgency=medium
* Team upload.
* New upstream release
- Fixes CVE-2017-7656: A remote user can submit a specially crafted HTTP/0.9
request containing invalid request headers to cause Jetty and an upstream
HTTP agent (such as an origin server or another proxy) to interpret the
boundary of the HTTP request differently. As a result, a malicious request
may be embedded within another request as processed by the subsequent
system. This allows a remote user to potentially poison the cache.
- Fixes CVE-2017-7657: A remote user can submit a specially crafted HTTP
request containing invalid Chunked Transfer-Encoding headers to cause
Jetty and an upstream HTTP agent (such as an origin server or another
proxy) to interpret the boundary of the HTTP request differently.
As a result, a malicious request may be embedded within another request
as processed by the subsequent system. This allows a remote user to
potentially poison the cache.
- Fixes CVE-2017-7658: A remote user can submit a specially crafted HTTP
request containing more than one Content-Length header to cause Jetty
and an upstream HTTP agent (such as an origin server or another proxy)
to interpret the boundary of the HTTP request differently. As a result,
a malicious request may be embedded within another request as processed
by the subsequent system. This allows a remote user to potentially poison
the cache.
* Compile with the --release parameter to preserve the compatibility
with older JREs
-- Emmanuel Bourg <ebourg@apache.org> Tue, 03 Jul 2018 14:31:51 +0200
jetty9 (9.2.24-1) unstable; urgency=medium
* Team upload.
......
debian/copyright
View file @ e8f297ed
Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: Jetty
Source: http://git.eclipse.org/c/jetty/org.eclipse.jetty.project.git
Files: *
Copyright: 2006-2016, Mort Bay Consulting Pty. Ltd.
Copyright: 2006-2018, Mort Bay Consulting Pty. Ltd.
License: Apache-2.0 or EPL-1.0
Files: jetty-ant/src/main/java/org/eclipse/jetty/ant/utils/TaskLog.java
......@@ -38,7 +38,7 @@ Files: debian/*
Copyright: 2003, Philipp Meier <meier@meisterbohne.de>
2009, Ludovic Claude <ludovic.claude@laposte.net>
2009, David Yu <david.yu.ftw@gmail.com>
2012-2015, Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
2012-2018, Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
License: Apache-2.0
License: Apache-2.0
......
debian/maven.properties
View file @ e8f297ed
maven.test.skip=true
maven.compiler.release=7
examples/async-rest/async-rest-jar/pom.xml
View file @ e8f297ed
......@@ -2,7 +2,7 @@
<parent>
<groupId>org.eclipse.jetty</groupId>
<artifactId>example-async-rest</artifactId>
<version>9.2.24.v20180105</version>
<version>9.2.25.v20180606</version>
</parent>
<modelVersion>4.0.0</modelVersion>
<groupId>org.eclipse.jetty.example-async-rest</groupId>
......
examples/async-rest/async-rest-jar/src/main/java/org/eclipse/jetty/example/asyncrest/AbstractRestServlet.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
examples/async-rest/async-rest-jar/src/main/java/org/eclipse/jetty/example/asyncrest/AsyncRestServlet.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
examples/async-rest/async-rest-jar/src/main/java/org/eclipse/jetty/example/asyncrest/SerialRestServlet.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
examples/async-rest/async-rest-webapp/pom.xml
View file @ e8f297ed
......@@ -2,7 +2,7 @@
<parent>
<groupId>org.eclipse.jetty</groupId>
<artifactId>example-async-rest</artifactId>
<version>9.2.24.v20180105</version>
<version>9.2.25.v20180606</version>
</parent>
<modelVersion>4.0.0</modelVersion>
<groupId>org.eclipse.jetty.example-async-rest</groupId>
......
examples/async-rest/async-rest-webapp/src/test/java/org/eclipse/jetty/example/asyncrest/DemoServer.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
examples/async-rest/pom.xml
View file @ e8f297ed
......@@ -2,7 +2,7 @@
<parent>
<groupId>org.eclipse.jetty.examples</groupId>
<artifactId>examples-parent</artifactId>
<version>9.2.24.v20180105</version>
<version>9.2.25.v20180606</version>
<relativePath>../pom.xml</relativePath>
</parent>
<modelVersion>4.0.0</modelVersion>
......
examples/embedded/pom.xml
View file @ e8f297ed
......@@ -2,7 +2,7 @@
<parent>
<groupId>org.eclipse.jetty.examples</groupId>
<artifactId>examples-parent</artifactId>
<version>9.2.24.v20180105</version>
<version>9.2.25.v20180606</version>
<relativePath>../pom.xml</relativePath>
</parent>
<modelVersion>4.0.0</modelVersion>
......
examples/embedded/src/main/java/HelloWorld.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......
examples/embedded/src/main/java/org/eclipse/jetty/embedded/AsyncEchoServlet.java
View file @ e8f297ed
//
// ========================================================================
// Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd.
// Copyright (c) 1995-2018 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
......