Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package jetty-minimal for openSUSE:Factory checked in at 2021-06-09 21:53:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jetty-minimal (Old) and /work/SRC/openSUSE:Factory/.jetty-minimal.new.32437 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "jetty-minimal" Wed Jun 9 21:53:06 2021 rev:9 rq:898823 version:9.4.42 Changes: -------- --- /work/SRC/openSUSE:Factory/jetty-minimal/jetty-minimal.changes 2021-05-15 23:17:20.096467247 +0200 +++ /work/SRC/openSUSE:Factory/.jetty-minimal.new.32437/jetty-minimal.changes 2021-06-09 21:53:27.074597638 +0200 @@ -1,0 +2,6 @@ +Wed Jun 9 14:07:47 UTC 2021 - Fridrich Strba <[email protected]> + +- Update to version 9.4.42.v20210604 + * Fix: bsc#1187117, CVE-2021-28169 + +------------------------------------------------------------------- @@ -5,5 +11,5 @@ - * Fix: CVE-2021-28165 - jetty server high CPU when client send - data length > 17408 - * Fix: CVE-2021-28164 - Normalize ambiguous URIs - * Fix: CVE-2021-28163 - Exclude webapps directory from deployment - scan + * Fix: bsc#1184367 CVE-2021-28165 - jetty server high CPU when + client send data length > 17408 + * Fix: bsc#1184368 CVE-2021-28164 - Normalize ambiguous URIs + * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory + from deployment scan jetty-websocket.changes: same change Old: ---- jetty.project-jetty-9.4.40.v20210413.tar.gz New: ---- jetty.project-jetty-9.4.42.v20210604.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jetty-minimal.spec ++++++ --- /var/tmp/diff_new_pack.Z8QUsz/_old 2021-06-09 21:53:27.902599113 +0200 +++ /var/tmp/diff_new_pack.Z8QUsz/_new 2021-06-09 21:53:27.922599149 +0200 @@ -1,5 +1,5 @@ # -# spec file for package jetty-minimal +# spec file # # Copyright (c) 2021 SUSE LLC # Copyright (c) 2000-2007, JPackage Project @@ -18,10 +18,10 @@ %global base_name jetty -%global addver .v20210413 +%global addver .v20210604 %define src_name %{base_name}.project-%{base_name}-%{version}%{addver} Name: %{base_name}-minimal -Version: 9.4.40 +Version: 9.4.42 Release: 0 Summary: Java Webserver and Servlet Container License: Apache-2.0 OR EPL-1.0 ++++++ jetty-websocket.spec ++++++ --- /var/tmp/diff_new_pack.Z8QUsz/_old 2021-06-09 21:53:27.942599185 +0200 +++ /var/tmp/diff_new_pack.Z8QUsz/_new 2021-06-09 21:53:27.946599192 +0200 @@ -1,5 +1,5 @@ # -# spec file for package jetty-websocket +# spec file # # Copyright (c) 2021 SUSE LLC # Copyright (c) 2000-2007, JPackage Project @@ -18,10 +18,10 @@ %global base_name jetty -%global addver .v20210413 +%global addver .v20210604 %define src_name %{base_name}.project-%{base_name}-%{version}%{addver} Name: %{base_name}-websocket -Version: 9.4.40 +Version: 9.4.42 Release: 0 Summary: The websocket modules for Jetty License: Apache-2.0 OR EPL-1.0 ++++++ jetty.project-jetty-9.4.40.v20210413.tar.gz -> jetty.project-jetty-9.4.42.v20210604.tar.gz ++++++ /work/SRC/openSUSE:Factory/jetty-minimal/jetty.project-jetty-9.4.40.v20210413.tar.gz /work/SRC/openSUSE:Factory/.jetty-minimal.new.32437/jetty.project-jetty-9.4.42.v20210604.tar.gz differ: char 13, line 1
