Skip to content

Releases: jetty/jetty.project

11.0.22

03 Jul 23:26
jetty-11.0.22
e711d4c
Compare
Choose a tag to compare

Changelog

  • #11939 - Updating URL refs from eclipse.org/jetty and eclipse.dev/jetty to jetty.org (including XML dtd references)

10.0.22

03 Jul 23:26
jetty-10.0.22
5c8471e
Compare
Choose a tag to compare

Changelog

  • #11939 - Updating URL refs from eclipse.org/jetty and eclipse.dev/jetty to jetty.org (including XML dtd references)

12.0.10

03 Jun 15:22
jetty-12.0.10
26106df
Compare
Choose a tag to compare

Changelog

  • #11851 - jetty-ee8-websocket-javax-server export not honoured
  • #11811 - getHeaderNames should return header name once also when request has it in different case
  • #11800 - client: Allow AsyncContentListener.onContent to throw checked Exceptions
  • #11792 - StdErrAppender should detect exception circular references
  • #11776 - NPE from org.eclipse.jetty.ee8.nested.Request.getRequestURL
  • #11767 - Backward compat API WebAppContext.getServerClassMatcher() is not updating the WebAppClassloader
  • #11766 - Ensure ReadListener is nulled out when AsyncContext is completed.
  • #11763 - Race condition in QoSHandler
  • #11760 - request.getHttpURI().getScheme() is null on FORWARD dispatched request, causing NPE
  • #11756 - ChunkAccumulator not working with empty chunks
  • #11748 - Unexpected HTTP Response Status Code: 404 Not Found
  • #11745 - Issue while adding Module for Persistent HTTP Sessions: Google Cloud DataStore
  • #11736 - Issue with Response OutputStream#close() rethrowing same EofException instance
  • #11507 - org.eclipse.jetty.util.Attributes.getAttribute() should specify return type if no match is found
  • #11501 - Introduce experiment fully virtual VirtualThreadPool
  • #11072 - Introduce StateTrackingHandler
  • #9778 - Remove WriteFlusher.Listener
  • #9177 - Add JVM info and OS info to Dumpable.dump()

11.0.21

16 May 08:32
jetty-11.0.21
996cd61
Compare
Choose a tag to compare

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #11782 - HttpExchange retained by HttpSenderOverHTTP which caused memory leak (@shaoxt)
  • #11634 - Socks5Proxy does not support IP addresses with IP segments above 127 (@MarcinKozak005)
  • #10805 - Jetty response with an invalid HTTP2 packet if the client set the hpack table size as 0
  • #11527 - Reduce ByteBuffer churning in HttpOutput
  • #11656 Upgrade jetty-quiche-native to version 0.21.0

10.0.21

16 May 08:31
jetty-10.0.21
12306d3
Compare
Choose a tag to compare

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #11782 - HttpExchange retained by HttpSenderOverHTTP which caused memory leak (@shaoxt)
  • #11634 - Socks5Proxy does not support IP addresses with IP segments above 127 (@MarcinKozak005)
  • #10805 - Jetty response with an invalid HTTP2 packet if the client set the hpack table size as 0
  • #11527 - Reduce ByteBuffer churning in HttpOutput
  • #11656 Upgrade jetty-quiche-native to version 0.21.0

12.0.9

07 May 16:21
jetty-12.0.9
efe8023
Compare
Choose a tag to compare

Changelog

  • #11699 - new IllegalStateException when attempting to access Request/Response outside of Request Lifecycle
  • #11687 - HttpFields$Mutable$Wrapper.computeField() incorrectly calls onAddField() when null is returned by computeFn
  • #11686 - Document the rewrite Jetty module.
  • #11659 - HTTP Fields with OWS (Optional WhiteSpace) in value are not properly parsed in Jetty 12
  • #11651 - Jetty 12.0.x refactor common maven plugin classes
  • #11649 - NON_POOLING static ByteBufferPool
  • #11648 - Introduce new HttpDateTime class for parsing obsolete Date formats in HTTP and Cookie
  • #11642 - Restore jetty-ee8-runner
  • #11639 - Introduce various aliases to start.jar options
  • #11637 - Fix for some invalid server behaviors when a client is aborting a request
  • #11616 - Distribution tests depends on jetty-home so ensure it is build first
  • #11573 - Introduce new disable-urlcache module to globally disable JVM URL caching of jar protocol references
  • #11570 - update SizeLimitHandler with fixes needed for appengine tests
  • #11566 - Move ClassMatcher to core to have a consistent fix for addServerClasses in all environments
  • #11490 - CustomRequestLog.ignorePath doesn't work as documented
  • #11488 - Inconsistent default port number in HttpURI and HostPort
  • #11420 - HTTP/3 Race with Dynamic Table referencing in QPackDecoder
  • #11026 - Start Stop issue with Jetty 12 - state file not deleted every time

12.0.8

03 Apr 13:44
jetty-12.0.8
ffffdcc
Compare
Choose a tag to compare

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #11587 - Allow configuring showCause in ErrorHandler
  • #11583 - Broken HTTP/3 tests
  • #11577 - Remove usages of URIUtil.toURI and URIUtil.split
  • #11574 - shibboleth idp webapp under jetty 12.0.7
  • #11572 - Deploy behaves differently when both WAR and XML exist in ${jetty.base}/webapps/ and you update the XML vs updating the WAR.
  • #11558 - New tmp directory should be created on every WebAppContext start, if not explicitly configured
  • #11556 - Improvements and cleanups to ErrorHandler.
  • #11553 - Restore startWebapp() to WebAppContext
  • #11548 - java.nio.file.ClosedFileSystemException on hot redeploy
  • #11539 - Resource.copyTo(Resource) has different behavior from Jetty 9/10/11
  • #11522 - Allows to change the default ErrorHandler response type (@dhs3000)
  • #11518 - Ensure request is set for ContextScopeListener in EE10
  • #11513 - Perf regression in the HTTP parser caused by long look-ahead
  • #11510 - Occasional NPE in ClassMatcher.match() from WebAppClassLoader.loadClass() usage
  • #11509 - Removing constructor in CookieCache on minor version Change of artifact
  • #11498 - Optimized ReservedThreadExecutor with ThreadIdPool
  • #11495 - Add UriCompliance rules that follow the HTTP / URI / Servlet specs for illegal & suspicious characters
  • #11486 - Improve HTTP parsing long look-ahead
  • #11482 - The StatisticsHandler doesn't count 2xx codes
  • #11451 - Reintroduce Cross Context Dispatch in Jetty 12
  • #11411 - Allow non existant resources to be obtained from Resource.resolve()
  • #11364 - Cleanup Resource IO
  • #11319 - Implemented addBeanFromConstructor
  • #10870 - How to set HttpConfiguration.securePort when the HTTPS port is dynamic?
  • #10387 - Fix or suppress javadoc warnings
  • #7647 - Document org.eclipse.jetty.client.Socks4Proxy "secure" parameter
  • #5857 - Deprecate AbstractConnectionPool "callback" methods

12.0.7

06 Mar 16:59
jetty-12.0.7
c89aca8
Compare
Choose a tag to compare

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #11465 - HttpURI.toURI() sets userInfo to null
  • #11455 - Improve DEBUG during WebInfConfiguration.unpack
  • #11448 - UriCompliance.Violation ignored despite being set
  • #11443 - Fix NPE in HttpReceiverOverHTTP2.read() when the channel's stream is null
  • #11435 - Add suppressed failures in Callback failed
  • #11432 - Change default number of acceptor threads
  • #11426 - Experiment with ArrayByteBufferPool performance
  • #11424 - What is the jetty.deploy.scanInterval default? module, ini, code, and documentation do not agree.
  • #11414 - When producing URI/URL strings follow spec and produce lowercase schemes and drop default ports
  • #11410 - PathMappingsHandler does not start ResourceHandler properly
  • #11401 - Replace StringBuffer with StringBuilder
  • #11398 - WebSocket ClosedChannelException when demanding frames in onOpen
  • #11397 - Jetty 12: ContextHandler.getTempDirectory() does not respect the Context.getTempDirectory() contract
  • #11387 - Reintroduce MultiPartCompliance.LEGACY (not as default) too allow for parsing of non-compliant multipart/form-data
  • #11386 - Making FormFields get defaults from Context, not Request
  • #11383 - Added documentation about SslHandshakeListener.
  • #11377 - Jetty 12 fails to start WebApp Bundle with OSGi Boot bundle (or when packaged)
  • #11371 - Review ArrayByteBufferPool eviction
  • #11370 - IllegalStateException when last write fails
  • #11363 - ContentSourcePublisher throws from request
  • #11361 - Updates to UriCompliance.checkUriCompliance
  • #11360 - drop buildnumber:create already executed by jetty-util (@hboutemy)
  • #11356 - Allow ServerWebSocketContainer to be created without ContextHandler
  • #11353 - The default virtual thread executor should created named threads (@danishnawab)
  • #11310 - Uploading big multipart files via jetty 12.0.5 with spring boot 3.2.1 cause problems
  • #11279 - fix use of AliasCheckers with CombinedResource
  • #11278 - 500 response when trying to display symlinked directory
  • #11270 - Windows 11 pro - problem launching Jetty with ${jetty.home}\etc\jetty-ee10-deploy.xml
  • #10432 - Fix buffer leaks in FCGI and H3 HttpClientIdleTimeoutTest
  • #8979 - Jetty 12 - HttpClientTransport network "modes"
  • #8887 - Jetty-12 client calls onDataAvailable with producing thread

9.4.54.v20240208

13 Feb 22:54
jetty-9.4.54.v20240208
cef3fbd
Compare
Choose a tag to compare

Security Updates

This release addresses:

  • CVE-2024-22201 - HTTP/2 connection not closed after idle timeout when TCP congested

Sponsored Release

This is a release of the End of Community Support Jetty 9.x series that was sponsored by a support contract from Webtide.com

Changelog

  • #1256 DoSFilter leaks USER_AUTH entries
  • #11259 HTTP/2 connection not closed after idle timeout when TCP congested
  • #11389 Strip default ports on ws/wss scheme uris too

12.0.6

31 Jan 15:11
jetty-12.0.6
78ab6e6
Compare
Choose a tag to compare

Security Updates

This release addresses:

  • CVE-2024-22201 - HTTP/2 connection not closed after idle timeout when TCP congested

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #11329 - Jetty 11->12 migration guide has incorrect new artifact names
  • #11317 - Cleanup usages of addBean(Object) from constructors
  • #11312 - baseResource/resourceBase is no longer extracted from ServletContext
  • #11309 - ensure callback is always completed in WebSocketCoreSession
  • #11303 - JettyWebSocketFrameHandler incorrectly relies on autoDemand when handlers are not registered
  • #11299 - EE8/9 DefaultServlet.doPost() doesn't behave like Jetty 10/11
  • #11296 - AbstractLoginModule porting issue
  • #11290 - HTTP 400 and NPE in HttpParser for blank header value in Jetty 12.x
  • #11288 - Fixes for Spring core integration
  • #11282 - Deadlocks with DEBUG logging enabled in jetty-server testing
  • #11281 - Failed LOG.debug() with MultiPart
  • #11280 - EE10 OSGi Boot invalid jetty.xml Handler configuration
  • #11275 - Jakarta websocket @OnMessage with Reader parameter stops working when there is an unhandled exception
  • #11262 - Correct some javadoc typos
  • #11259 - HTTP/2 connection not closed after idle timeout when TCP congested
  • #11253 - Jetty 12 ComplianceViolation.Listener not notified for URI, Cookie, and Multipart violations.
  • #11230 - Problem with parsing of form parameters without values in Jetty 12?
  • #11228 - Reorganized and refactored JettyHomeTester to introduce JPMSTester.
  • #11220 - ContextHandler(anyHandler) NPE during . logging 'because "this._vhosts" is null'
  • #11098 - Sporadic NPE in ArrayByteBufferPool.evict()
  • #11096 - IllegalAccessException when invoking WebSocket end point methods in Jetty 12
  • #11095 - throws IllegalStateException for completed requests when Gzip Handler is used
  • #11081 - Dropped WebSocket messages due to race condition in WebSocket frame handling
  • #11080 - Google Cloud: during Multipart - java.lang.IllegalArgumentException: Cannot create chunk from non-retainable ContentChunk
  • #10220 - Implement CrossOriginHandler