jetty-http-spi-9.4.56-150200.3.28.1<>,7gzp9|l]oɾtBwc&~AS=tkZ'$)?1UEOQ[$컛X 8d x!x]pB@ 箶"2sZ:۷[x_dD]ݬ/$cYN_%,bފ@;To gm uSv K˨/°xp<(>>%?%d & D-Nd z     H\(89 :F!G!H!I!X!Y!\" ]"4^"b"c#d$/e$4f$7l$9u$Lv$`w%,x%@y%Tz%h%x%|%%Cjetty-http-spi9.4.56150200.3.28.1The http-spi module for Jetty Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. This package contains The http-spi module for Jetty.gzh01-ch3blPSUSE Linux Enterprise 15SUSE LLC Apache-2.0 OR EPL-1.0https://www.suse.com/Productivity/Networking/Web/Servershttps://www.eclipse.org/jetty/linuxnoarchT 3A큤A큤gzgzgzgzgzb6f32dda894366a40f183811ac8b43d023a9ba03f0b99f1e56ab7fc5a867e6f4b5fb17565223858096fd51fb1238c914bccbfd0d04bbaaebfd081a8c513af308f3249196d7ce2243ab55c62f4971e63b77d8c54d938fa4161ba505f01b3f9cb6rootrootrootrootrootrootrootrootrootrootjetty-minimal-9.4.56-150200.3.28.1.src.rpmjetty-http-spimvn(org.eclipse.jetty:jetty-http-spi)mvn(org.eclipse.jetty:jetty-http-spi:pom:)osgi(org.eclipse.jetty.http.spi)@ @    java-headlessjavapackages-filesystemrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.83.0.4-14.6.0-14.0-15.2-14.14.1gY@ee?e'd^@djdS@cGb@bBb9@an@`i@`i@`ٹ`@`f@`KW_@_^@^]߶]X]d@fstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comdimstar@opensuse.orgfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comshvetz.anton@gmail.comfstrba@suse.comrpm@fthiessen.defstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.com- Upgrade to version 9.4.56.v20240826 * Security fixes: + CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks * Changes: + #12201 backport ThreadLimitHandler improvements from Jetty 12 + #11938 - Updating URL refs from eclipse.org/jetty and eclipse.dev/jetty to jetty.org (including XML dtd references) + #10805 - Jetty response with an invalid HTTP2 packet if the client set the hpack table size as 0- Upgrade to version 9.4.54.v20240208 * Security fixes + CVE-2024-22201, bsc#1220437: HTTP/2 connection not closed after idle timeout when TCP congested * Other changes + #1256 DoSFilter leaks USER_AUTH entries + #11389 Strip default ports on ws/wss scheme uris too- Do not force Java 11 to build on i586- Upgrade to version 9.4.53.v20231009 * Fixes of 9.4.53.v20231009 + CVE-2023-44487, bsc#1216169 + CVE-2023-36478, bsc#1216162 + #10679 - backport HTTP/2 rate control from Jetty 10.0.x + #10573 - backport hpack improvements from Jetty 10.0.x + #10546 - backport jetty-http Huffman encoders/decoders from Jetty 10.0.x * Fixes of 9.4.52.v20230823 + #10352 - Jetty accepts "+" prefixed value in Content-Length (CVE-2023-40167, bsc#1215417) + #10337 - SizeLimitHandler does not enforce 0 responseLimit + #10169 - make sure that a ServiceLoader is retrieved before iterating + #10066 - Allow SAXParserFactory or SAXParser to be configured in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh workaround + #9887 - Deprecate CGI Servlet (CVE-2023-36479, bsc#1215415) + #9716 - Deprecate PushSessionCacheFilter + #9660 - OpenId Revoked authentication allows one request (CVE-2023-41900, bsc#1215416) + #9476 - onCompleteFailure called multiple times- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp- Update to version 9.4.51.v20230217 * Fixes of 9.4.49.v20220914: + #8578 - getRequestURL can append "null" if getRequestURI is unspecified in an authority-form request-target + #8493 - Review HTTP client feature setRemoveIdleDestinations * Fixes of 9.4.50.v20221201: + #8774 - Added SizeLimitHandler + #8678 - Jetty client is not responding to GO_AWAY packet received from (Jetty) Server and continue to send traffic on same connection * Fixes of 9.4.51.v20230217: + #9352 - Update / Fix CookieCutter + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620 + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049, bsc#1210621- Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS.- Force building with java 11 on ix86 in order to avoid random build failures- Upgrade to version 9.4.48.v20220622 * Fixes + #8184 - All suffix globs except first fail to match if path has "." character in prefix section + #8145 - RegexPathSpec backport of optional group name/info lookup if regex fails + #8088 - Add option to configure exitVm on ShutdownMonitor from System properties + #8067 - Wall time usage in DoSFilter RateTracker results in false positive alert + #8014 - Review HttpRequest URI construction (Resolves CVE-2022-2047, bsc#1201317) + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578 parser + #7947 - Improved PathSpec handling for servletName & pathInfo + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048, bsc#1201316) + #7918 - PathMappings.asPathSpec does not allow root ServletPathSpec + #7863 - Default servlet drops first accept-encoding header if there is more than one. + #7858 - GZipHandler does not play nice with other handlers in HandlerCollection + #7837 - Fix StatisticsHandler in the case a Handler throws exception + #7809 - Jetty 9.4.x 7801 duplicate set session cookies + #7748 - Allow overriding of url-pattern mapping in ServletContextHandler to allow for regex or uri-template matching- Upgrade to version 9.4.46.v20220328 * Changes + Option --write-module-graph produces wrong .dot file + ArrayTrie getBest fails to match the empty string entry in certain cases + Interrupt flag is not always cleared in between requests + Gzip compression not working for multipart/form-data when added to the allowed list using addIncludedMimeTypes. + Miconfigured headerCacheSize in can result in IllegalArgumentException + HttpServletResponse.encodeURL not working for URLs starting with ../- Build with java source and target levels 8 - Fix javadoc generation on JDK >= 13- Make importing of package sun.misc optional since not all jdk versions export it- Splitting the jetty-unixsocket artifact into a separate spec file in order to avoid extra dependencies for the jetty-minimal package.- Update to version 9.4.43.v20210629 * Fix: bsc#1188438, CVE-2021-34429 * Changes: + Improve alias checking in PathResource + java.nio.ReadOnlyBufferException + Deprecate support for UTF16 encoding in URIs + Update to spifly 1.3.3 + Update to asm 9.1- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart, rewrite, start, unixsocket- Update to version 9.4.42.v20210604 * Fix: bsc#1187117, CVE-2021-28169- Update to version 9.4.40.v20210413 * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when client send data length > 17408 * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory from deployment scan- Upgrade to upstream version 9.4.38.v20210224 * Fixes bsc#1182898, CVE-2020-27223- Upgrade to upstream version 9.4.35.v20201120 * Fixes bsc#1179727, CVE-2020-27218- Upgrade to upstream version 9.4.30.v20200611- Upgrade to upstream version 9.4.27.v20200227- Removed patch: * jetty-annotations-asm6.patch + not needed when building against ASM7- Upgrade to upstream version 2.9.22.v20191022 * new jetty-openid amd jetty-util-ajax sub-packages - Modified patch: * jetty-annotations-asm6.patch + adapt to changed context + build against asm6 instead of asm7 that we don't have - Fix some rpmlint warnings and errors- Initial packaging of a minimal version of jetty 9.4.19.v20190610 * This version is light on dependenciesh01-ch3b 17290677479.4.56-150200.3.28.19.4.56.v202408269.4.56.v202408269.4.56jettyjetty-http-spi.jarjetty-minimal-jetty-http-spi.xmljettyjetty-http-spi.pom/usr/share/java//usr/share/java/jetty//usr/share/maven-metadata//usr/share/maven-poms//usr/share/maven-poms/jetty/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36077/SUSE_SLE-15-SP2_Update/0ac9f78180b0a8127a278ae08aa38644-jetty-minimal.SUSE_SLE-15-SP2_Updatedrpmxz5noarch-suse-linuxdirectoryASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract)XML 1.0 document, ASCII textexported SGML document, ASCII textPPPRRrYҁN~+e|utf-892e49495368792bb3564044fd0f407d75238e26092e9933c60817cba6b180082? 7zXZ !t/ ~]"k%'lJEWWvӞx=-1^@ \ pLYd?Pg(<7s2Z(wQf:r#J{*cK)(1:2}aYP"dݑCDͱ01Z9J"|cb'$>\UNK6T///3Q_$'s\׸Yu["\6L40$nN:eɧY^$5- Ha˯cOEa)裕 E|;qj#>XǪ낎Q%#`%Ӌ(pp0YjpRci| JlSmMqEK\1&7Ax51A5¨16&5'? 3&gvy\לq*cM;,R:$:\qNпIZ[b ( L2 p;&vjŞ><6G D.8 +7:8F SZy5 5Y5?ER0{hW\!^'Jc;ac2S_ ה/ynBoK75XLiX[^5Ct]b%X ּi٭'5o 9s6#M)uLxmgHKx> %vQÌ`l)E M,<8+AތTD4rrdYHtBN _#k_U]|"Ӻeʳ~Rɡca:J (LljTnp6H;E0rb3=QB̼*4詳 ^{JGO~\W}\UGPԒiÙ6Ee%+bʊ=`YEb6ARiNO=u,I(Bv1HT U`tBQwF>#'CjvpBy^#,@KwF`~V\Z6ڹE0樓hNw[ܜ.fSi`”핍[^|`f֒9e4#\5]肇NȈbQ,X"vbvo3 I@F3gJ3SiE1\s{ m@Јs:;a㘖 ıGݕ&p;rpOv|j[!L(daTdػ@A'bvmGB;vȕ]1F/m=;HYLZ}/|(S]w6?4Gq]h;$e\f>9X G;FS-k5xL>]$>y"+cL=web"(qZ1\V]}1ܔ`NPܑ5H?lysJH!Hkصףh4Nʂu_n ]+2h᎙=e]`Ye&dHͿĈ ca=q4 o,"cdi=D/q̨tIm#Kxa ^д@JaI"v^:JނL5h5/ 2vX(km-! /AjPo S>@\΢P$0͸&g{fĔɀk-, ^bN: ЍB rPur d}S c9鐲oǰrQTjd^H oKneN [ U(/PR(_qM]ݖnpk *6 ~Q>M2k@w1W '[_/e*Q< ᶬaa$$JHS,|c_c'ѡw\0:ks5q#ݳK\D.dY%iL_'/WU &́xV& !_g (uY>z$l+~ub|7#{OzXd{sU6fdLtQ jBVKiqr%8j;^:Q_+9䃉6sl.4 2>V%g@VB+lDqVڳy7Am p S"DgonlK PRj.q7_df3O#X\$5⾰P]0iYs]G3/V@-z6|+D:9l& )zՠHC-͖Q]t6ê@@M"p厂iZE(JG-ߺqž ˗9>{`j_Sg\&TΨ5\cӪx'ɋS@Y*2:"Fl >* l&2loV6P<&V^K3QC2oF|"~A"}=;o%:ĖC{< LJ:WB۝C`}ud~y]Jճ=f9&. ,jUܣ4Fz5E#cגM윢c7ZNZvM /')_,2KJaܿrH-B?iMTt4^B?nsϯOQ3(dRZ0!P K-"U91=5:V;!"d?r5)+h,YF5]!*؆(_8V=`ďE*LHB 46)5HvԲ1l\x4>E΁RTUm,( 4@&ȵl/+(Li[PR.6]c93@K_ YZ