Eclipse
/
jetty.project
mirror of https://github.com/jetty/jetty.project.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10521 from eclipse/fix/10.0.x/cve-numbers 

Fixing CVE number for CGI servlet deprecation (10.0.x)
This commit is contained in:
Joakim Erdfelt 2023-09-14 16:39:48 -05:00 committed by GitHub
parent 52c9dcaee6 96d4d45541
commit d7d203d869
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
VERSION.txt
View File

@ -26,7 +26,7 @@ jetty-10.0.16 - 25 August 2023
+ 9772 Improve Quiche certificates deployment + 9772 Improve Quiche certificates deployment
+ 9777 CrossOriginFilter does not return Vary header on no-cors mode + 9777 CrossOriginFilter does not return Vary header on no-cors mode
+ 9795 http3-server is leaking the Jetty logging service to web applications + 9795 http3-server is leaking the Jetty logging service to web applications
+ 9887 Deprecate CGI Servlet (CVE-2023-40167) + 9887 Deprecate CGI Servlet (CVE-2023-36479)
+ 9895 A MessageTooLargeException doesn't close a WebSocket connection + 9895 A MessageTooLargeException doesn't close a WebSocket connection
+ 9947 Cannot invoke "org.eclipse.jetty.io.ManagedSelector.getTotalKeys()" + 9947 Cannot invoke "org.eclipse.jetty.io.ManagedSelector.getTotalKeys()"
because "selector" is null because "selector" is null
@ -55,7 +55,7 @@ jetty-10.0.16 - 25 August 2023
jetty-9.4.52.v20230823 - 23 August 2023 jetty-9.4.52.v20230823 - 23 August 2023
+ 9476 onCompleteFailure called multiple times + 9476 onCompleteFailure called multiple times
+ 9660 OpenId Revoked authentication allows one request (CVE-2023-41900) + 9660 OpenId Revoked authentication allows one request (CVE-2023-41900)
+ 9887 Deprecate CGI Servlet (CVE-2023-40167) + 9887 Deprecate CGI Servlet (CVE-2023-36479)
+ 10066 Allow `SAXParserFactory` or `SAXParser` to be configured in Jetty's + 10066 Allow `SAXParserFactory` or `SAXParser` to be configured in Jetty's
`XmlParser` class `XmlParser` class
+ 10168 NPE in websocket extension startup + 10168 NPE in websocket extension startup