<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Markus Koschany pushed to branch stretch
at <a href="https://salsa.debian.org/java-team/jetty9">Debian Java Maintainers / jetty9</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/2696c4eb035cc49a1f55cd38ab73f7ce18324d2d">2696c4eb</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2017-06-09T16:06:07+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.2.22</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/95cd089a29649e79cfb1179f5e72c43612ef1a74">95cd089a</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2018-01-05T17:18:36+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.2.23</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/bb8f32e3a8a52a9b54059c034422e14b022e0790">bb8f32e3</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2018-05-18T00:09:59+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.2.24</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/f4cd8d9873c41afd108427ad46594f6c21466e2d">f4cd8d98</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2018-07-03T13:32:33+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.2.25</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/4719fe26b2d453fd1a5e9e3ba2c4e5965e6ef530">4719fe26</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2018-09-05T12:23:24+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.2.26</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/0039f9e5e045222fc2186ce37c60e514f534d459">0039f9e5</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2018-12-05T01:23:45+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.14</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/e43ce8afa2cc5b33f041b79754b4c1c1c407f3c4">e43ce8af</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2019-02-25T01:01:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.15</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/4fc17536afbc238aa05a9694ddc48843c9b932f9">4fc17536</a></strong>
<div>
<span>by tony mancill</span>
<i>at 2019-05-04T21:54:32-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.18</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/a08f248792331a1d6c792c0f4b5dcc99084ada2b">a08f2487</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-27T22:56:05+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.19</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/49e77cb61204bbb1cb57b0e3654642c060209b50">49e77cb6</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-27T23:09:43+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.20</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/07ce42230d0474ed0a18e98c798ab807d3054d09">07ce4223</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-27T23:30:15+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.21</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/2bab93ca7c7c6faadef1c65dd177fb1c0fac0975">2bab93ca</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-27T23:44:52+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.22</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/cdad63e3d9adec6ee7b566ecff2e62b538602155">cdad63e3</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-27T23:50:14+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.23</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/50cd5a46f0d440132aa44c2abb77e283b348754c">50cd5a46</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-28T00:01:19+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.24</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/7352bbb9ac748b3a97c3473b1db39a5d992dd5c0">7352bbb9</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-28T00:06:00+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.25</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/f046479bb1e78f0001a271a3525cf45adecf6259">f046479b</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-01-28T00:15:57+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.26</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/13a150419e69fdddd7b0d68fcf1f99ed64c08a88">13a15041</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-03-01T15:07:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.27</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/bf726174248ffc6b5d509a5fd245d17a0aa4c748">bf726174</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-04-13T22:35:45+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.28</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/3f7fc1f58fd36648a122453b802240acb119cc01">3f7fc1f5</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-05-27T17:52:15+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.29</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/3d1fd2eed575fc178b6607ee68fae04662898be5">3d1fd2ee</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-09-03T14:21:45+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.30</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/b78d9e138b034d608a9301c1af338d46f1385e56">b78d9e13</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-09-03T14:22:08+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.31</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/2d25cfcc7b4cc07ccdda313ebfecbb345933b04f">2d25cfcc</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-10-22T09:46:42+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.32</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/25dac4767e93728c25c963b083a4c413488fd212">25dac476</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-10-22T09:47:05+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.33</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/16c43b484fc9910e3579e36ef98409a6c1d4487d">16c43b48</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-12-28T19:31:51+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.34</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/9e7eca9df44cdad5a6f610eef5d6b3e1ad5266c7">9e7eca9d</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2020-12-28T19:32:16+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.35</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/cbd13ba317fe3c0a218ec9624f3c057b28f103fe">cbd13ba3</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2021-01-17T23:44:08+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.36</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/86a0d38a1123d946019b7663c2d158073a0f01bb">86a0d38a</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2021-02-28T21:39:35+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.37</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/2e0a534894346be1948b03c9799f4493376ecd92">2e0a5348</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2021-02-28T21:40:02+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.38</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/ddb35e5e67a25616ec684ae42d7d1713681e0439">ddb35e5e</a></strong>
<div>
<span>by Emmanuel Bourg</span>
<i>at 2021-04-12T00:00:37+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.4.39</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/6121482802ad0a8b915b9f995fd584c099adeec4">61214828</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-07-03T21:19:16+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Import Upstream version 9.2.30</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/jetty9/-/commit/d90bcf5d23e4284fbf45bfe66554e0c2a525c562">d90bcf5d</a></strong>
<div>
<span>by Sylvain Beucler</span>
<i>at 2021-07-03T21:19:30+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Import Debian changes 9.2.30-0+deb9u2
jetty9 (9.2.30-0+deb9u2) stretch-security; urgency=high
..
* Non-maintainer upload by the LTS Security Team.
* CVE-2021-28169: requests to the ConcatServlet with a doubly encoded
path may access protected resources within the WEB-INF directory. For
example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the
web.xml file. This can reveal sensitive information regarding the
implementation of a web application.
..
jetty9 (9.2.30-0+deb9u1) stretch-security; urgency=high
..
* Non-maintainer upload by the LTS Security Team.
* Fix FTBFS due to modified .pom files in newer tomcat8.
* New upstream release, last upstream 9.2.x release before EOL.
Fixes CVE-2017-9735 CVE-2018-12536 CVE-2019-10241 CVE-2019-10247.
* CVE-2020-27216: race condition in system's temporary directory.
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#0c2c5c506cef0ed2d3ad2b7e45e97980b66f5520">
Jenkinsfile
</a>
</li>
<li class="file-stats">
<a href="#9266624b881ae43f2b64a389484ea9e0754afaa6">
VERSION.txt
</a>
</li>
<li class="file-stats">
<a href="#600b389cfdc10e2c613506b12e441c5622bee2cd">
aggregates/jetty-all/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#3a84a3e818e163cb3b1195854ec8d303c169db10">
aggregates/jetty-websocket-all/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#672ce6dcd05a2372c389083e70f7bbf32a6a79fa">
apache-jsp/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#7364d1b57a992736082cc85b6f74f95db514bbb0">
apache-jsp/src/main/java/org/eclipse/jetty/apache/jsp/JettyJasperInitializer.java
</a>
</li>
<li class="file-stats">
<a href="#27dd5ee390608d9097b196bf4ae76e9598197c41">
apache-jsp/src/main/java/org/eclipse/jetty/apache/jsp/JuliLog.java
</a>
</li>
<li class="file-stats">
<a href="#5c387724b6eec3f702b96e8a210e728d83c0f87d">
apache-jsp/src/main/java/org/eclipse/jetty/jsp/JettyJspServlet.java
</a>
</li>
<li class="file-stats">
<a href="#f62e58e9e063cbb529ed9cfa33a2b1960f9eef22">
apache-jstl/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#58530b38acb0fa3a65612c676abaea46c4a3f2f3">
debian/maven.rules
</a>
</li>
<li class="file-stats">
<a href="#ba46c7b266dcbc476405214026111afc2a81edfe">
debian/patches/01-maven-bundle-plugin-version.patch
</a>
</li>
<li class="file-stats">
<a href="#6af66b8aca3fa8555b0c6165546d8e8e0538938b">
debian/patches/05-remove-bundle-required-execution-environment.patch
</a>
</li>
<li class="file-stats">
<a href="#889f808356f9eae8a05430670d64d41c2352567d">
<span class="deleted-file">
−
debian/patches/06-CVE-2017-7658_CVE-2017-7657_CVE-2017-7656.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#6a523b1b198c06d2203f4e9ff88b3eafcf5f421e">
<span class="new-file">
+
debian/patches/CVE-2020-27216.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#40b2f5cc4e8dab5788308e2fd12c7c555fb42566">
<span class="new-file">
+
debian/patches/CVE-2021-28169.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#191bfcdd85689e42684e76071dc11804f40edb64">
<span class="new-file">
+
debian/patches/ecj-dependency.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#bc34014ab4b9a49dd7a27bdd8d352912607c3a96">
debian/patches/series
</a>
</li>
<li class="file-stats">
<a href="#e552d918750bff2db54b7e93b6d7ead614f26e6f">
examples/async-rest/async-rest-jar/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#c82fc87ce46f3f60e3ba8ed47e236e0b01ab36e6">
examples/async-rest/async-rest-jar/src/main/java/org/eclipse/jetty/example/asyncrest/AbstractRestServlet.java
</a>
</li>
<li class="file-stats">
<a href="#91b72cb8c15d3579d94caa1a179543a42a347640">
examples/async-rest/async-rest-jar/src/main/java/org/eclipse/jetty/example/asyncrest/AsyncRestServlet.java
</a>
</li>
<li class="file-stats">
<a href="#4d4ba740696ef295e226c941694fe1a89e2ea364">
examples/async-rest/async-rest-jar/src/main/java/org/eclipse/jetty/example/asyncrest/SerialRestServlet.java
</a>
</li>
<li class="file-stats">
<a href="#688d8089fb7222fcaff787e8d28742c4bf641d22">
examples/async-rest/async-rest-webapp/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#1f9c73b4c0a1590536bcc4a933462d4c2dd8105f">
examples/async-rest/async-rest-webapp/src/test/java/org/eclipse/jetty/example/asyncrest/DemoServer.java
</a>
</li>
<li class="file-stats">
<a href="#c536672910f620e47d55c253227b3089fd07a478">
examples/async-rest/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#b0e2e2f80ac3f3c1491c6b16feb148ff9f4e7cc9">
examples/embedded/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#e27109d4cf15cf9a935bb8b22f43d9199c415fd2">
examples/embedded/src/main/java/HelloWorld.java
</a>
</li>
<li class="file-stats">
<a href="#54c263e9f4b75ede4901d44c186b8497fdc7b0b7">
examples/embedded/src/main/java/org/eclipse/jetty/embedded/AsyncEchoServlet.java
</a>
</li>
<li class="file-stats">
<a href="#11387a502a940cf06bcc1ab013a7251495866d39">
examples/embedded/src/main/java/org/eclipse/jetty/embedded/DumpServlet.java
</a>
</li>
<li class="file-stats">
<a href="#552a524a3f09be3dd9acdeff9d7678ae1eff7c48">
examples/embedded/src/main/java/org/eclipse/jetty/embedded/ExampleServer.java
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">
—
<br>
<a href="https://salsa.debian.org/java-team/jetty9/-/compare/9e483e1820fd9ef2e62b2a51e918f5bb71bc2dd7...d90bcf5d23e4284fbf45bfe66554e0c2a525c562">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>