Ubuntu
jetty package

jetty 6.1.24-6ubuntu0.12.04.1 source package in Ubuntu

Changelog

jetty (6.1.24-6ubuntu0.12.04.1) precise-security; urgency=low

  * SECURITY UPDATE: denial of service via many hash collisions
    - debian/patches/CVE-2011-4461.patch: limit number of form parameters
      to avoid a DoS in modules/jetty/src/main/java/org/mortbay/jetty/Request.java,
      modules/jetty/src/main/java/org/mortbay/jetty/handler/ContextHandler.java,
      modules/jetty/src/test/java/org/mortbay/jetty/RequestTest.java,
      modules/util/src/main/java/org/mortbay/util/UrlEncoded.java,
      modules/util/src/test/java/org/mortbay/util/URLEncodedTest.java.
    - CVE-2011-4461
 -- Marc Deslauriers <email address hidden>   Mon, 23 Apr 2012 09:26:54 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
java
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates universe java
Precise security universe java

Downloads

File Size SHA-256 Checksum
jetty_6.1.24.orig.tar.gz 2.0 MiB cfe6c1320d5c3a62a2d61c9319cbc5884ccdc3e2df22aea8bde893824ef322f9
jetty_6.1.24-6ubuntu0.12.04.1.debian.tar.gz 27.5 KiB 8367a16b93c4fd5ac6351afb520c0059191100c1a1681b4b8b56270ea6478960
jetty_6.1.24-6ubuntu0.12.04.1.dsc 2.7 KiB d4ed00f4dead2509fc0f99642a111ae58e850b605dd3caa01c3d47a82e1c4509

View changes file

Binary packages built by this source

jetty: Java servlet engine and webserver

 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.

libjetty-extra: Java servlet engine and webserver -- extra libraries

 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.
 This package contains the platform-dependent libraries used by Jetty.
 Currently it contains libsetuid.so which can be used to start Jetty as root
 so that privileged ports may be accessed and then switched to a non-root
 user for security.

libjetty-extra-java: Java servlet engine and webserver -- extra libraries

 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.
 The extra libraries include jetty-management, jetty-naming,
 jetty-servlet-tester, jetty-ajp, jetty-java5-threadpool,
 jetty-client, jetty-rewrite-handler, jetty-plus, jetty-annotations

libjetty-java: Java servlet engine and webserver -- core libraries

 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.

libjetty-java-doc: Javadoc for the Jetty API

 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.
 .
 This package contains the Javadoc for libjetty-java.