lp:ubuntu/natty-updates/jetty

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

13. By Marc Deslauriers on 2012-04-23

* SECURITY UPDATE: denial of service via many hash collisions
  - debian/patches/CVE-2011-4461.patch: limit number of form parameters
    to avoid a DoS in modules/jetty/src/main/java/org/mortbay/jetty/Request.java,
    modules/jetty/src/main/java/org/mortbay/jetty/handler/ContextHandler.java,
    modules/jetty/src/test/java/org/mortbay/jetty/RequestTest.java,
    modules/util/src/main/java/org/mortbay/util/UrlEncoded.java,
    modules/util/src/test/java/org/mortbay/util/URLEncodedTest.java.
  - CVE-2011-4461

12. By Niels Thykier on 2010-07-05

* Removed Depends on JREs for library packages, no longer required
  by the policy.
* Added missing depends on JREs for the jetty package.
* Made init script ignore weird exit statuses from logrotate.
  (Closes: 589681, LP: #607202)
* Fixed broken restart command in jetty init script. Was missing a
  negation.

11. By Niels Thykier on 2009-10-23

* New upstream release.
* Stopped using /tmp/jetty-temp in /etc/init.d/jetty for security
  reasons.
  - JVM_TMP is now /var/cache/jetty/tmp
  - JETTY_TMP is now /var/cache/jetty/data
* The postrm script no longer deletes files in /tmp/jetty-temp.
* Removed Philipp Meier from Uploaders (last upload was 2006-06-07).
  Thanks for your work on this package.
* Corrected javadoc symlink in binary package jetty.

10. By Ludovic Claude on 2009-09-07

* Move documentation to /usr/share/doc/libjetty-java
* Better postinst and postrm scripts, aligned with tomcat6 scripts:
   - postinst: user jetty is created with its own group
   - postrm: better cleanup of temporary data,
     thourough remove and purge of data
* debian/changelog:
  - fix suggest for package libjetty-java-doc, add libjetty-java-doc
    to the list of Suggests for libjetty-java
  - add libjetty-extra to the list of Suggests for package jetty.

9. By Michael Koch on 2007-10-24

* New upstream release.
  - Removed debian/patches/cve-2007-6969.patch. Applied upstream.
* Added recognition of installed libcommons-el-java to debian/start.config.
  Closes: #352093.
* Fixed short and long service description in debian/jetty.init.
  Closes: #446788.
* Removed libapache2-mod-webapp from Suggests.
* Added watch file.

8. By Michael Koch on 2007-10-05

* Added patch to fix CVE-2006-6969. Thanks to Greg Wilkins for the patch.
  Closes: #445283.
* Updated debian/patches/jdk-1.2-src-encoding.patch to make it work with
  current ecj.

7. By Michael Koch on 2007-07-24

* Fix debian/jetty.init to permit removal without purge and offer a new
  NO_START option in /etc/default/jetty. Closes: #356067.
  Thanks to Loic Minier for the patch.
* Added additional paths to JDK_DIRS in debian/jetty.init.
  Closes: #405851.
* (Build-)Depends on java-gcj-compat.
* Moved debhelper from Build-Depends-Indep to Build-Depends.
* Removed Build-Depends on libtomcat5-java and replace Depends on
  libtomcat5-java by libtomcat5.5-java.
* Added LSB section in debian/jetty.init.
* Removed extra license file from /usr/share/doc/jetty.
* Added myself to Uploaders.

6. By Philipp Meier on 2006-05-30

* Fix in init script for new version of su (closes #367491).
* Create logfile if not existing. Aknolwedge NMU (closes #356066).

5. By Philipp Meier on 2005-10-10

Fix location of jasper since upgrade to tomcat5. Closes: #333010.

4. By Matej Vela <email address hidden> on 2005-05-02

* Non-maintainer upload.
* Transition to liblog4j1.2-java. Closes: #306761.