Package: jenkins-winstone / 0.9.10-jenkins-37+dfsg-2

Metadata

Package Version Patches format
jenkins-winstone 0.9.10-jenkins-37+dfsg-2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
specification resources.patch | (download)

src/conf/javax/servlet/resources/XMLSchema.dtd | 402 402 + 0 - 0 !
src/conf/javax/servlet/resources/datatypes.dtd | 203 203 + 0 - 0 !
src/conf/javax/servlet/resources/j2ee_1_4.xsd | 1616 1616 + 0 - 0 !
src/conf/javax/servlet/resources/j2ee_web_services_client_1_1.xsd | 353 353 + 0 - 0 !
src/conf/javax/servlet/resources/javaee_5.xsd | 2102 2102 + 0 - 0 !
src/conf/javax/servlet/resources/javaee_web_services_client_1_2.xsd | 585 585 + 0 - 0 !
src/conf/javax/servlet/resources/jsp_2_0.xsd | 316 316 + 0 - 0 !
src/conf/javax/servlet/resources/jsp_2_1.xsd | 349 349 + 0 - 0 !
src/conf/javax/servlet/resources/web-app_2_2.dtd | 602 602 + 0 - 0 !
src/conf/javax/servlet/resources/web-app_2_3.dtd | 1022 1022 + 0 - 0 !
src/conf/javax/servlet/resources/web-app_2_4.xsd | 1242 1242 + 0 - 0 !
src/conf/javax/servlet/resources/web-app_2_5.xsd | 1275 1275 + 0 - 0 !
src/conf/javax/servlet/resources/xml.xsd | 287 287 + 0 - 0 !
13 files changed, 10354 insertions(+)

 winstone ships a number of non-dfsg compliant resources
 for specifications around JEE - Sun did release these under compatible
 licenses (this patch).
java7 compat.patch | (download)

pom.xml | 2 1 + 1 - 0 !
src/java/winstone/jndi/resourceFactories/WinstoneConnection.java | 22 22 + 0 - 0 !
src/java/winstone/jndi/resourceFactories/WinstoneDataSource.java | 6 6 + 0 - 0 !
3 files changed, 29 insertions(+), 1 deletion(-)

 add stubbed out methods to support compilation under
 Java 7
CVE 2012 6072.patch | (download)

src/java/winstone/URIUtil.java | 14 11 + 3 - 0 !
src/java/winstone/WinstoneOutputStream.java | 3 1 + 2 - 0 !
src/java/winstone/ajp13/Ajp13OutputStream.java | 6 3 + 3 - 0 !
3 files changed, 15 insertions(+), 8 deletions(-)

 [patch] [fixed security-44]

Do not allow the webapp to split HTTP header values into multiple lines. Since there's no obvious escaping semantics here, we just drop those characters, which is what Jetty does.