Package: openjdk-8-jre-headless
Version: 8u72-b15-1~bpo8+1
Severity: minor
File: openjdk
Dear Maintainer,
The oracle policy for JVM version numbers is at
http://www.oracle.com/technetwork/java/javase/versioning-naming-139433.html
It states that:
A GA (FCS) product version or build identifier
A jira has been raised in jetty to fix this issue:
http://jira.codehaus.org/browse/JETTY-1152
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Debs for jetty 6.1.11 are available
http://dist.codehaus.org/jetty/jetty-6.1.11/debian/
what needs to be done to get these into the next release?
cheers
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Hi,
I see that debian is still shipping Jetty 5 rather than jetty 6 (which has
these issues
fixed).
Long overdue, I've created a patch for jetty 5 to fix these minor security
issues.
see: http://docs.codehaus.org/display/JETTY/Jetty+Security
patch attached.
regards
? .classpath
? .project
?
this bug should be closed.
the CERT never applied to jetty 5 (which is what debian uses)
and was fixed some time ago in jetty 6
Please see
http://docs.codehaus.org/display/JETTY/Jetty+Security
Note that it would also be good for debian to upgrade to jetty 6
cheers
--
To UNSUBSCRIBE, e
While Jetty can run on a 1.4 JVM, perhaps in debian it may just be
simpler to build it only run with 1.5 and later.
After all, java was only really open sourced from 1.5.
cheers
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Note,
due to security problems found in 6.1.5, it is best that all jetty6
efforts be switched to 6.1.7.
see http://docs.codehaus.org/display/JETTY/Jetty+Security
We are also now making debs for Jetty6 with every release:
http://dist.codehaus.org/jetty/jetty-6.1.7/debian/
These are built f
The patch to fix this issue for 5.1.10 is available
http://jetty.cvs.sourceforge.net/jetty/Jetty/src/org/mortbay/jetty/servlet/AbstractSessionManager.java?r1=1.52&r2=1.53
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
8 matches
Mail list logo