lp:ubuntu/lucid-security/jetty
- Get this branch:
- bzr branch lp:ubuntu/lucid-security/jetty
Branch merges
Branch information
Recent revisions
- 14. By Marc Deslauriers
-
* SECURITY UPDATE: denial of service via many hash collisions
- debian/patches/ CVE-2011- 4461.patch: limit number of form parameters
to avoid a DoS in modules/jetty/src/ main/java/ org/mortbay/ jetty/Request. java,
modules/jetty/src/ main/java/ org/mortbay/ jetty/handler/ ContextHandler. java,
modules/jetty/src/ test/java/ org/mortbay/ jetty/RequestTe st.java,
modules/util/src/ main/java/ org/mortbay/ util/UrlEncoded .java,
modules/util/src/ test/java/ org/mortbay/ util/URLEncoded Test.java.
- CVE-2011-4461 - 13. By Thierry Carrez
-
* debian/build.xml, debian/module.xml: Enable tests in the jetty module
* debian/rules: Adding slf4j-simple to the DEB_JARS since it's used in tests
* debian/rules, debian/control: Added junit and ant-optional needed for tests
* debian/control, debian/rules: Build with default-jdk. - 12. By Pablo Duboue
-
* New upstream release. (Closes: #553644)
* Added OSGi bundle metadata (by upstream). (Closes: #558187)
* Corrected path to jetty web-apps (by Niels Thykier). (Closes: #554877) - 11. By Niels Thykier
-
* New upstream release.
* Stopped using /tmp/jetty-temp in /etc/init.d/jetty for security
reasons.
- JVM_TMP is now /var/cache/jetty/tmp
- JETTY_TMP is now /var/cache/jetty/data
* The postrm script no longer deletes files in /tmp/jetty-temp.
* Removed Philipp Meier from Uploaders (last upload was 2006-06-07).
Thanks for your work on this package.
* Corrected javadoc symlink in binary package jetty. - 10. By Ludovic Claude
-
* Move documentation to /usr/share/
doc/libjetty- java
* Better postinst and postrm scripts, aligned with tomcat6 scripts:
- postinst: user jetty is created with its own group
- postrm: better cleanup of temporary data,
thourough remove and purge of data
* debian/changelog:
- fix suggest for package libjetty-java-doc, add libjetty-java-doc
to the list of Suggests for libjetty-java
- add libjetty-extra to the list of Suggests for package jetty. - 9. By Michael Koch
-
* New upstream release.
- Removed debian/patches/ cve-2007- 6969.patch. Applied upstream.
* Added recognition of installed libcommons-el-java to debian/start.config.
Closes: #352093.
* Fixed short and long service description in debian/jetty.init.
Closes: #446788.
* Removed libapache2-mod-webapp from Suggests.
* Added watch file. - 8. By Michael Koch
-
* Added patch to fix CVE-2006-6969. Thanks to Greg Wilkins for the patch.
Closes: #445283.
* Updated debian/patches/ jdk-1.2- src-encoding. patch to make it work with
current ecj. - 7. By Michael Koch
-
* Fix debian/jetty.init to permit removal without purge and offer a new
NO_START option in /etc/default/jetty. Closes: #356067.
Thanks to Loic Minier for the patch.
* Added additional paths to JDK_DIRS in debian/jetty.init.
Closes: #405851.
* (Build-)Depends on java-gcj-compat.
* Moved debhelper from Build-Depends-Indep to Build-Depends.
* Removed Build-Depends on libtomcat5-java and replace Depends on
libtomcat5-java by libtomcat5.5-java.
* Added LSB section in debian/jetty.init.
* Removed extra license file from /usr/share/doc/jetty.
* Added myself to Uploaders. - 6. By Philipp Meier
-
* Fix in init script for new version of su (closes #367491).
* Create logfile if not existing. Aknolwedge NMU (closes #356066).
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:ubuntu/quantal/jetty