Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package jetty-minimal for openSUSE:Factory checked in at 2024-10-16 23:47:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jetty-minimal (Old) and /work/SRC/openSUSE:Factory/.jetty-minimal.new.19354 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "jetty-minimal" Wed Oct 16 23:47:34 2024 rev:24 rq:1208241 version:9.4.56 Changes: -------- --- /work/SRC/openSUSE:Factory/jetty-minimal/jetty-alpn.changes 2024-10-14 13:06:39.183308325 +0200 +++ /work/SRC/openSUSE:Factory/.jetty-minimal.new.19354/jetty-alpn.changes 2024-10-16 23:48:55.346411503 +0200 @@ -1,0 +2,14 @@ +Tue Oct 15 21:27:27 UTC 2024 - Fridrich Strba <fstrba@suse.com> + +- Upgrade to version 9.4.56.v20240826 + * Security fixes: + + CVE-2024-8184, bsc#1231651, ThreadLimitHandler.getRemote() + vulnerable to remote DoS attacks + * Changes: + + #12201 backport ThreadLimitHandler improvements from Jetty 12 + + #11938 - Updating URL refs from eclipse.org/jetty and + eclipse.dev/jetty to jetty.org (including XML dtd references) + + #10805 - Jetty response with an invalid HTTP2 packet if the + client set the hpack table size as 0 + +------------------------------------------------------------------- jetty-http2.changes: same change jetty-minimal.changes: same change jetty-unixsocket.changes: same change jetty-websocket.changes: same change Old: ---- jetty.project-jetty-9.4.54.v20240208.tar.gz New: ---- jetty.project-jetty-9.4.56.v20240826.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jetty-alpn.spec ++++++ --- /var/tmp/diff_new_pack.ytOwkv/_old 2024-10-16 23:49:00.734636219 +0200 +++ /var/tmp/diff_new_pack.ytOwkv/_new 2024-10-16 23:49:00.738636385 +0200 @@ -18,10 +18,10 @@ %global base_name jetty -%global addver .v20240208 +%global addver .v20240826 %define src_name %{base_name}.project-%{base_name}-%{version}%{addver} Name: %{base_name}-alpn -Version: 9.4.54 +Version: 9.4.56 Release: 0 Summary: The alpn modules for Jetty License: Apache-2.0 OR EPL-1.0 ++++++ jetty-http2.spec ++++++ --- /var/tmp/diff_new_pack.ytOwkv/_old 2024-10-16 23:49:00.770637720 +0200 +++ /var/tmp/diff_new_pack.ytOwkv/_new 2024-10-16 23:49:00.770637720 +0200 @@ -18,10 +18,10 @@ %global base_name jetty -%global addver .v20240208 +%global addver .v20240826 %define src_name %{base_name}.project-%{base_name}-%{version}%{addver} Name: %{base_name}-http2 -Version: 9.4.54 +Version: 9.4.56 Release: 0 Summary: The http2 modules for Jetty License: Apache-2.0 OR EPL-1.0 ++++++ jetty-minimal.spec ++++++ --- /var/tmp/diff_new_pack.ytOwkv/_old 2024-10-16 23:49:00.798638888 +0200 +++ /var/tmp/diff_new_pack.ytOwkv/_new 2024-10-16 23:49:00.798638888 +0200 @@ -18,10 +18,10 @@ %global base_name jetty -%global addver .v20240208 +%global addver .v20240826 %define src_name %{base_name}.project-%{base_name}-%{version}%{addver} Name: %{base_name}-minimal -Version: 9.4.54 +Version: 9.4.56 Release: 0 Summary: Java Webserver and Servlet Container License: Apache-2.0 OR EPL-1.0 ++++++ jetty-unixsocket.spec ++++++ --- /var/tmp/diff_new_pack.ytOwkv/_old 2024-10-16 23:49:00.826640055 +0200 +++ /var/tmp/diff_new_pack.ytOwkv/_new 2024-10-16 23:49:00.826640055 +0200 @@ -18,10 +18,10 @@ %global base_name jetty -%global addver .v20240208 +%global addver .v20240826 %define src_name %{base_name}.project-%{base_name}-%{version}%{addver} Name: %{base_name}-unixsocket -Version: 9.4.54 +Version: 9.4.56 Release: 0 Summary: The unixsocket modules for Jetty License: Apache-2.0 OR EPL-1.0 ++++++ jetty-websocket.spec ++++++ --- /var/tmp/diff_new_pack.ytOwkv/_old 2024-10-16 23:49:00.858641390 +0200 +++ /var/tmp/diff_new_pack.ytOwkv/_new 2024-10-16 23:49:00.858641390 +0200 @@ -18,10 +18,10 @@ %global base_name jetty -%global addver .v20240208 +%global addver .v20240826 %define src_name %{base_name}.project-%{base_name}-%{version}%{addver} Name: %{base_name}-websocket -Version: 9.4.54 +Version: 9.4.56 Release: 0 Summary: The websocket modules for Jetty License: Apache-2.0 OR EPL-1.0 ++++++ jetty.project-jetty-9.4.54.v20240208.tar.gz -> jetty.project-jetty-9.4.56.v20240826.tar.gz ++++++ /work/SRC/openSUSE:Factory/jetty-minimal/jetty.project-jetty-9.4.54.v20240208.tar.gz /work/SRC/openSUSE:Factory/.jetty-minimal.new.19354/jetty.project-jetty-9.4.56.v20240826.tar.gz differ: char 13, line 1