jetty (6.1.26-3+dyson1) unstable; urgency=medium * Package for Dyson -- Igor Pashev Wed, 03 Sep 2014 17:14:46 +0400 jetty (6.1.26-3) unstable; urgency=low * Team upload. * d/jetty.init: variable $ROTATELOGS path chenged from /usr/sbin to /usr/bin (Closes: #719875) * Added Class-Path to jars to fix Lintian missing-classpath warning -- Eugene Zhukov Tue, 22 Apr 2014 10:13:52 +0000 jetty (6.1.26-2) unstable; urgency=low * Team upload. * Bumped to Standard-Versions 3.9.5 - no changes required. * Switched to libtomcat7-java (Closes: #686876) * Added detection to init script for openjdk-8, openjdk-7 and openjdk-6 multiarch installations (Closes: #675027) -- Eugene Zhukov Fri, 11 Apr 2014 11:35:28 +0000 jetty (6.1.26-1) unstable; urgency=low * New upstream release. - Fixes issues with loading javax.activation. (Closes: #594913) * Enable hardening flags for the setuid.so file. * Updated d/copyright to DEP-5 format 1.0. * Exit 0 in jetty's init script if jetty is already running. Thanks to Toby for the report and patch. (Closes: #626382) * Fix misspelled "character-class" in grep invocation. Thanks to Isaac for the report and correction. (Closes: #637961) * Allow java.library.path to be set in /etc/default/jetty. Thanks to "biddster" for the report and the patches. (Closes: #600175, LP: #656374) * Apply patch from Fedora to fix hash collision related DOS. - CVE-2011-4461 * Remove Michael Koch from Uploaders. Thanks for your work on this package in the past. (Closes: #654034) * Add gnumail-providers.jar to start.config. Thanks to Michele Renda for the suggestion. (Closes: #591851) * Add symlinks from jetty{,-util}-6.1.24.jar to the 6.1.26 version to avoid breaking eclipse. -- Niels Thykier Wed, 25 Apr 2012 12:26:13 +0200 jetty (6.1.24-6) unstable; urgency=medium * Removed Depends on JREs for library packages, no longer required by the policy. * Added missing depends on JREs for the jetty package. * Made init script ignore weird exit statuses from logrotate. (Closes: 589681, LP: #607202) * Fixed broken restart command in jetty init script. Was missing a negation. -- Niels Thykier Mon, 05 Jul 2010 22:28:14 +0200 jetty (6.1.24-5) unstable; urgency=low * Ignore test failures. (Closes: #586635) * Remove debian/.mh in clean target. -- Torsten Werner Tue, 29 Jun 2010 20:53:42 +0200 jetty (6.1.24-4) unstable; urgency=low * Updated the versions in the Manifests to match the actual version of jetty. * Remove all use of sudo in jetty.init. (Closes: #580639) * Fixed some formatting issues in the NEWS file. * Bumped debhelper compat to 7. * Made the javadoc link against system javadocs. This includes adding Recommends on various java-doc packages. -- Niels Thykier Sun, 20 Jun 2010 14:49:32 +0200 jetty (6.1.24-3) unstable; urgency=low [ Torsten Werner ] * Merge changes from Ubuntu version 6.1.22-1ubuntu1: - debian/build.xml, debian/module.xml: Enable tests in the jetty module - debian/rules: Adding slf4j-simple to the DEB_JARS since it's used in tests - debian/rules, debian/control: Added junit and ant-optional needed for tests [ Miguel Landaeta ] * Enable jetty-plus and jetty-annotations modules. (Closes: #585387). -- Torsten Werner Thu, 10 Jun 2010 14:07:51 -0430 jetty (6.1.24-2) unstable; urgency=low * Set JAVA_HOME in d/rules to /usr/lib/jvm/default-java. (Closes: #578618, #579469) * Fix the installation of jetty-util5.jar. (Closes: #569328) -- Torsten Werner Thu, 29 Apr 2010 07:36:43 +0200 jetty (6.1.24-1) unstable; urgency=low [ Niels Thykier ] * Reduced Depends on libjetty-java-doc to a Suggests. (Closes: #569293) * Clarified what JETTY_HOST should be set to in order to accept all connections. (Closes: #554874) * Bumped Standards-Version to 3.8.4 - no changes required. [ Torsten Werner ] * New upstream release. * Change Build-Depends: default-jdk. (Closes: #578618) * Switch to source format 3.0. -- Torsten Werner Fri, 23 Apr 2010 23:55:35 +0200 jetty (6.1.22-1ubuntu1) lucid; urgency=low * debian/build.xml, debian/module.xml: Enable tests in the jetty module * debian/rules: Adding slf4j-simple to the DEB_JARS since it's used in tests * debian/rules, debian/control: Added junit and ant-optional needed for tests * debian/control, debian/rules: Build with default-jdk. -- Thierry Carrez Tue, 26 Jan 2010 09:52:06 +0100 jetty (6.1.22-1) unstable; urgency=medium * New upstream release. (Closes: #553644) * Added OSGi bundle metadata (by upstream). (Closes: #558187) * Corrected path to jetty web-apps (by Niels Thykier). (Closes: #554877) -- Pablo Duboue Sun, 13 Dec 2009 1:55:00 -0400 jetty (6.1.21-1) unstable; urgency=medium * New upstream release. * Stopped using /tmp/jetty-temp in /etc/init.d/jetty for security reasons. - JVM_TMP is now /var/cache/jetty/tmp - JETTY_TMP is now /var/cache/jetty/data * The postrm script no longer deletes files in /tmp/jetty-temp. * Removed Philipp Meier from Uploaders (last upload was 2006-06-07). Thanks for your work on this package. * Corrected javadoc symlink in binary package jetty. -- Niels Thykier Fri, 23 Oct 2009 20:45:43 +0200 jetty (6.1.20-2) unstable; urgency=low * Move documentation to /usr/share/doc/libjetty-java * Better postinst and postrm scripts, aligned with tomcat6 scripts: - postinst: user jetty is created with its own group - postrm: better cleanup of temporary data, thourough remove and purge of data * debian/changelog: - fix suggest for package libjetty-java-doc, add libjetty-java-doc to the list of Suggests for libjetty-java - add libjetty-extra to the list of Suggests for package jetty. -- Ludovic Claude Mon, 07 Sep 2009 00:22:20 +0100 jetty (6.1.20-1) unstable; urgency=medium [ Niels Thykier ] * New upstream release. * Stop using Build-Depends-Indep, since the policy and the build daemons disagree on when it should be used (Closes: #540861). * Corrected jetty.install to reflect the move of some license files in the source tree. * Bumped to Standard-Versions 3.8.3 - no changes required. * Updated jetty.post{install,rm} scripts to use "set -e" instead of passing it to sh. * Installed "VERSION.txt" as upstream changelog. * A previous version (6.1.18-1) fixed the following security problems, which were not mentioned in the changelog: CVE-2007-5613, CVE-2007-5614, CVE-2007-5615, CVE-2009-1523, and CVE-2009-1524 (see below for more information). [ Torsten Werner ] * Set urgency to medium because this version fixes a FTBFS. -- Torsten Werner Sun, 06 Sep 2009 23:06:45 +0200 jetty (6.1.19-2) unstable; urgency=low * Upload to unstable. -- Torsten Werner Sun, 09 Aug 2009 08:48:10 +0200 jetty (6.1.19-1) experimental; urgency=low [ Ludovic Claude ] * New upstream release fixing a security vulnerability (cookies are not secure if you are running behind a netscaler). * Remove the bootstrap patch as it has been added upstream and update the build to use the new start-daemon component. * Remove the Build-Depend on quilt as the patch is not needed anymore. * Add the Maven POM to the package. * Add a Build-Depends dependency on maven-repo-helper. * Use mh_installpom and mh_installjar to install the POM and the jar to the Maven repository. * Add optional support for web applications located in /usr/share/webapps. * Add a cron job that cleans up the old log files in /var/log/jetty. * Register the Javadoc into Debian documentation and put it in a separate package (libjetty-java-doc). * Use openjdk-6-jdk for the build; add a Build-Depends on this package. Required to build the javadoc. * Update debian/copyright (patch provided by Jan Pascal Vanbest ). [ Torsten Werner ] * Add myself to Uploaders. * Update Standards-Version: 3.8.2. * Move package libjetty-java-doc to Section: doc. * Fix init script: check for /etc/default/rcS before reading it. -- Torsten Werner Tue, 14 Jul 2009 11:50:43 +0200 jetty (6.1.18-1) unstable; urgency=low [Ludovic Claude] * Add myself to Uploaders. * Change the build dependency on java-gcj to default-jdk. * Add init.d startup script. * Add dependencies on ant, libslf4j-java, libxerces2-java, libtomcat6-java for libjetty-extra-java, add links for the lib folder. * Add dependency on jsvc to run jetty as a daemon. * Add the package libjetty-setuid-java for the Setuid module (with native code). * Add an index page used when Jetty starts. * Use latest jasper from Tomcat to provide jsp 2.1 instead of Glassfish JSP implementation as in the standard distribution. * Add tools.jar to the classpath to be able to run JSP (Closes: #452586). * Fix Lintian warnings: add ${misc:Depends} to all Depends. * Move jetty to main as all its dependencies are in main, and jetty contains only code that complies with Debian guidelines, use java section like tomcat6 (Closes: #498582). * Do not depend on tomcat 5.5 (Closes: #530720, #458399). * Remove empty prerm and preinst scripts. * Remove old patches that don't apply anymore. * Update copyright and remove full text of Apache license. * Bump up compat to 6 and Standards-Version to 3.8.1. [David Yu] * New upstream release for jetty (Closes: #528389, #527571, #454529, #425152). * Fixed jetty.links. Now delegates install of start.jar to libjetty-java. [ Torsten Werner ] * fixes several security issues: - CVE-2007-5613: Cross-site scripting (XSS) vulnerability in Dump Servlet. - CVE-2007-5614: Quote Sequence vulnerability. - CVE-2007-5615: CRLF injection vulnerability. - CVE-2009-1523: Directory traversal vulnerability in the HTTP server in Mort Bay Jetty. - CVE-2009-1524: Cross-site scripting (XSS) vulnerability in Mort Bay Jetty. (Closes: #454529, #528389, #527571, #543462). -- Ludovic Claude Fri, 12 Jun 2009 17:19:08 +0100 jetty (5.1.14-1) unstable; urgency=low * New upstream release. - Removed debian/patches/cve-2007-6969.patch. Applied upstream. * Added recognition of installed libcommons-el-java to debian/start.config. Closes: #352093. * Fixed short and long service description in debian/jetty.init. Closes: #446788. * Removed libapache2-mod-webapp from Suggests. * Added watch file. -- Michael Koch Wed, 24 Oct 2007 14:14:45 +0200 jetty (5.1.10-4) unstable; urgency=low * Added patch to fix CVE-2006-6969. Thanks to Greg Wilkins for the patch. Closes: #445283. * Updated debian/patches/jdk-1.2-src-encoding.patch to make it work with current ecj. -- Michael Koch Fri, 05 Oct 2007 07:34:55 +0200 jetty (5.1.10-3) unstable; urgency=low * Fix debian/jetty.init to permit removal without purge and offer a new NO_START option in /etc/default/jetty. Closes: #356067. Thanks to Loic Minier for the patch. * Added additional paths to JDK_DIRS in debian/jetty.init. Closes: #405851. * (Build-)Depends on java-gcj-compat. * Moved debhelper from Build-Depends-Indep to Build-Depends. * Removed Build-Depends on libtomcat5-java and replace Depends on libtomcat5-java by libtomcat5.5-java. * Added LSB section in debian/jetty.init. * Removed extra license file from /usr/share/doc/jetty. * Added myself to Uploaders. -- Michael Koch Tue, 24 Jul 2007 20:40:27 +0200 jetty (5.1.10-2) unstable; urgency=low * Fix in init script for new version of su (closes #367491). * Create logfile if not existing. Aknolwedge NMU (closes #356066). -- Philipp Meier Tue, 30 May 2006 10:46:21 +0200 jetty (5.1.10-1) unstable; urgency=low * New upstream release. * Sercurity fixes for windows. * Fixed path aliasing with // on windows. * Fix for AJP13 with multiple headers. * Fix for AJP13 with encoded path. * Remove null dispatch attributes from getAttributeNames. * Put POST content default back to iso_8859_1. GET is UTF-8 still. -- Philipp Meier Tue, 30 May 2006 10:40:18 +0200 jetty (5.1.8-3) unstable; urgency=low * Enhance dependencies. -- Philipp Meier Fri, 16 Dec 2005 10:53:48 +0100 jetty (5.1.8-2) unstable; urgency=low * Add dependeny on apache2-util for log rotation. Closes: #343177. -- Philipp Meier Tue, 13 Dec 2005 14:28:09 +0100 jetty (5.1.8-1) unstable; urgency=low * New upstream release. From 5.1.8: * Fixed space in URL issued created in 5.1.6. From 5.1.7: * improved server stats. * char encoding for MultiPartRequest. * fixed merging of POST params in dispatch query string. * protect from NPE in dispatcher getValues. * Updated to 2.6.2 xerces. * JSP file servlet mappings copy JspServlet init params. * Prefix servlet context logs with org.mortbay.jetty.context. * better support for URI character encodings. * use commons logging jar instead of api jar. -- Philipp Meier Wed, 7 Dec 2005 11:06:10 +0100 jetty (5.1.6-1) unstable; urgency=high * New upstream release. * Fixed JSP visibility security issue in upstream. * Fix location of jasper since upgrade to tomcat5. Closes: #333010. -- Philipp Meier Wed, 30 Nov 2005 15:20:47 +0100 jetty (5.1.5rc1-5) unstable; urgency=low Patch from Oyvind Harboe : * increased default amount of memory available to 256Mbyte. the advantage of having more heap available is that more applications will be able to run without modification to the standard Jetty configuration. * added -Djava.library.path=/usr/lib to VM arguments. This is requried to make e.g. the librxtx-java package work. * Closes: #32960. -- Philipp Meier Thu, 22 Sep 2005 16:13:16 +0200 jetty (5.1.5rc1-4) unstable; urgency=low Patch from Oyvind Harboe : * Fixed rc script /etc/init.d/jetty. "stop" could leave dangling /var/run/jetty.pid. Fixed this by adding "--oknodo" to "start-stop-daemon --stop" command. * Removed trailing "/" from LOGDIR which caused /var/log/out.log not to be created. * /etc/init.d/jetty start will now deal more gracefully with a dangling /var/run/jetty.pid. A dangling jetty.pid is detected and ignored. * Closes: #326176. -- Philipp Meier Fri, 2 Sep 2005 13:40:59 +0200 jetty (5.1.5rc1-3) unstable; urgency=low * Removed -v from ant opts during build. * Remove pid file on stop. Closes: #325667 * Fix location of ant-1.6.jar in start.config. Closes: #324472. -- Philipp Meier Tue, 30 Aug 2005 13:37:15 +0200 jetty (5.1.5rc1-2) unstable; urgency=low * Builds with kaffe. * Adds patch to exclude Sun JSSE if not available. -- Philipp Meier Sat, 27 Aug 2005 14:21:12 +0200 jetty (5.1.5rc1-1) unstable; urgency=low * New upstream release. -- Philipp Meier Fri, 26 Aug 2005 12:53:50 +0200 jetty (5.1.4-1) unstable; urgency=low * New upstream release. * Added myself to Uploaders in control. * Standards-Version bumbed to 3.6.2. * Removed debian/watch which will not work with sourceforge. * Manage changes to upstream with cdbs simple-patchsys. * Fixed rc script /etc/init.d/jetty. * Adjusted new location of servlet.jar. Closes: #280139. -- Philipp Meier Fri, 12 Aug 2005 18:14:28 +0200 jetty (5.0.0-3) unstable; urgency=low * Package is now maintained by pkg-java. Maintainer was updated. * Disable validation of xml files in start.config by default. Closes: #298731. * Add /usr/lib/j2sdk1.5-sun to JAVA_HOME_DIRS in debian/rules. -- Philipp Meier Thu, 30 Jun 2005 14:32:31 +0200 jetty (5.0.0-2.1) unstable; urgency=low * Non-maintainer upload. * Transition to liblog4j1.2-java. Closes: #306761. -- Matej Vela Mon, 2 May 2005 12:12:12 +0200 jetty (5.0.0-2) unstable; urgency=low * Shipping working default configuration in /etc/jetty/jetty.xml. Closes: #278134 -- Philipp Meier Mon, 25 Oct 2004 11:52:25 +0200 jetty (5.0.0-1) unstable; urgency=low * New upstream release. -- Philipp Meier Thu, 16 Sep 2004 00:40:41 +0200 jetty (4.2.22-2) unstable; urgency=low * New upstream release. * Changed mantainer email. -- Philipp Meier Wed, 25 Aug 2004 18:14:56 +0200 jetty (4.2.21-1) unstable; urgency=low * New upstream release. -- Philipp Meier Mon, 23 Aug 2004 15:23:25 +0200 jetty (4.2.19-1) unstable; urgency=high * New upstream release. * Fixed DOS attack problem. -- Philipp Meier Fri, 19 Mar 2004 17:55:45 +0100 jetty (4.2.18-1) unstable; urgency=low * New upstream release. * Package description of jetty-extra lists the extensions provided. Closes: #232824 -- Philipp Meier Mon, 1 Mar 2004 13:54:01 +0100 jetty (4.2.15-1) unstable; urgency=low * Adds missing javadoc to /usr/share/doc/ * Removes invalid libxdoclet-java from Build-Depends. * Fixed clean target in upstreams extra build file. Building jetty twice from the debianized source should work now. -- Philipp Meier Thu, 15 Jan 2004 14:00:13 +0100 jetty (4.2.15) unstable; urgency=low * New upstream release. * New additional package jetty-extra. * Updated standards version from 3.5.10 to 3.6.0 * Build target directory are no longer in debian because the customization of the build process does not really pay off. -- Philipp Meier Wed, 14 Jan 2004 14:00:01 +0100 jetty (4.2.12-2) unstable; urgency=low * Fixes start.config to make jetty run with kaffe. * Updated standards version from 3.5.8 to 3.5.10. -- Philipp Meier Fri, 29 Aug 2003 14:43:40 +0200 jetty (4.2.12-1) unstable; urgency=low * New upstream release. -- Philipp Meier Tue, 12 Aug 2003 14:07:56 +0200 jetty (4.2.11-7) unstable; urgency=low * Adds alternative dependency on j2sdk1.4. * Fixes typos in debian/TODO. * Adds ant to classpath because jasper needs it. -- Philipp Meier Thu, 7 Aug 2003 20:34:19 +0200 jetty (4.2.11-6) unstable; urgency=low * Removes DH_VERBOSE from debian/rules. * /etc/jetty will be removed on purge. * Add build-dependency on j2sdk1.4. -- Philipp Meier Wed, 23 Jul 2003 15:38:05 +0200 jetty (4.2.11-5) unstable; urgency=low * Fix for /etc/default/jetty which was misplaced. * Fixes messed-up corrections for javadoc tags. Introduced before. -- Philipp Meier Wed, 23 Jul 2003 01:11:42 +0200 jetty (4.2.11-4) unstable; urgency=low * Jetty depends on j2re1.4 until build process of jetty with java < 1.4 works. * Fixes in build process. -- Philipp Meier Thu, 17 Jul 2003 12:56:14 +0200 jetty (4.2.11-3) unstable; urgency=low * Creates /usr/share/java/webapps if necessary. * Not longer uses symlinks in ext but a debianized start.config. * Changed to multiline logging. * Removed demo webapps and provides a preliminary debian jetty root. * Fixes /etc/defaults/jetty to be /etc/default/jetty. -- Philipp Meier Thu, 17 Jul 2003 12:56:03 +0200 jetty (4.2.11-2) unstable; urgency=low * Adds build dependencies on libmx4j-java and iblog4j-java. * Removes comment about "Tomcat 4" from /etc/jetty.init. * Renamed debian/{pre,post}{inst,rm} to debian/jetty.* * Enables javac.debug to provide useful stackstraces. -- Philipp Meier Tue, 15 Jul 2003 21:50:36 +0200 jetty (4.2.11-1) unstable; urgency=low * Initial Release. -- Philipp Meier Mon, 14 Jul 2003 13:21:36 +0200