Format: 1.8
Date: Mon, 23 Apr 2012 14:42:06 -0400
Source: jetty
Binary: libjetty-java libjetty-java-doc libjetty-extra-java libjetty-extra jetty
Architecture: sparc
Version: 6.1.22-1ubuntu1.1
Distribution: lucid
Urgency: low
Maintainer: Ubuntu/sparc Build Daemon <buildd@sejong.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 jetty      - Java servlet engine and webserver
 libjetty-extra - Java servlet engine and webserver -- extra libraries
 libjetty-extra-java - Java servlet engine and webserver -- extra libraries
 libjetty-java - Java servlet engine and webserver -- core libraries
 libjetty-java-doc - Javadoc for the Jetty API
Changes: 
 jetty (6.1.22-1ubuntu1.1) lucid-security; urgency=low
 .
   * SECURITY UPDATE: denial of service via many hash collisions
     - debian/patches/CVE-2011-4461.patch: limit number of form parameters
       to avoid a DoS in modules/jetty/src/main/java/org/mortbay/jetty/Request.java,
       modules/jetty/src/main/java/org/mortbay/jetty/handler/ContextHandler.java,
       modules/jetty/src/test/java/org/mortbay/jetty/RequestTest.java,
       modules/util/src/main/java/org/mortbay/util/UrlEncoded.java,
       modules/util/src/test/java/org/mortbay/util/URLEncodedTest.java.
     - CVE-2011-4461
Checksums-Sha1: 
 a79116bc9757671fdb8597874c999e5404a9ec49 65380 libjetty-extra_6.1.22-1ubuntu1.1_sparc.deb
Checksums-Sha256: 
 52e5e2ff3cf5ac41d558857529b924af4c3c2dcb89f82446bb2d579ba7d19cc0 65380 libjetty-extra_6.1.22-1ubuntu1.1_sparc.deb
Files: 
 8e32b7563944e28ae8f3268d67ebf32e 65380 libs optional libjetty-extra_6.1.22-1ubuntu1.1_sparc.deb
Original-Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>