Package: jenkins-winstone / 0.9.10-jenkins-37+dfsg-2
Metadata
Package | Version | Patches format |
---|---|---|
jenkins-winstone | 0.9.10-jenkins-37+dfsg-2 | 3.0 (quilt) |
Patch series
view the series filePatch | File delta | Description |
---|---|---|
specification resources.patch | (download) |
src/conf/javax/servlet/resources/XMLSchema.dtd |
402 402 + 0 - 0 ! |
winstone ships a number of non-dfsg compliant resources for specifications around JEE - Sun did release these under compatible licenses (this patch). |
java7 compat.patch | (download) |
pom.xml |
2 1 + 1 - 0 ! |
add stubbed out methods to support compilation under Java 7 |
CVE 2012 6072.patch | (download) |
src/java/winstone/URIUtil.java |
14 11 + 3 - 0 ! |
[patch] [fixed security-44] Do not allow the webapp to split HTTP header values into multiple lines. Since there's no obvious escaping semantics here, we just drop those characters, which is what Jetty does. |