B4J Question jServer 4 - Keeping Jetty Up to Date

[tchart]

Erel,

Given jServer 4 is not a fat JAR are there any implications of updating the versions of the Jetty libraries and modifying the XML?

e.g. can we swap out version 11.0.9 for 11.0.20?

Reason being there are several CVEs that relate to Jetty 11 up to 11.0.15

Alternatively, can the jServer 4 source be added to your GitHub (I didnt see it there) so I can build it myself?

Thanks

 

[Erel]

jServer source code: https://github.com/AnywhereSoftware/B4J/tree/master/Libs_Server/src/anywheresoftware/b4j/object
And you don't really need it as minor versions are usually backward compatible.

Just update the XML file.

 

[tchart]

Thanks Erel. I have tested 11.0.20 and it works!

I copied the jar/xml, renamed to jServer-11.0.20, created a folder called jserver-11.0.20 and updated the XML as required.

I downloaded Jetty 11.0.20 (the zip version) from the project website. Unzipped and copied the libraries across. NOTE the libraries are split across multiple directories in the zip file but need to be placed in the single "jserver-11.0.20" folder

<version>11.20</version>
    <dependsOn>c3p0-0.9.5.2</dependsOn>
    <dependsOn>c3p0-oracle-thin-extras-0.9.5.2</dependsOn>
    <dependsOn>mchange-commons-java-0.2.11</dependsOn>
    <dependsOn>json</dependsOn>
    <dependsOn>jserver-11.0.20/http2-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/http2-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-alpn-java-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-alpn-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-io-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-jakarta-servlet-api-5.0.2.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-jakarta-websocket-api-2.0.0.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-servlet-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-servlets-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-slf4j-impl-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-util-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/slf4j-api-2.0.9.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-core-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-core-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jakarta-client-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jakarta-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jakarta-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jetty-api-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jetty-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jetty-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-servlet-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-http-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-security-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/http2-hpack-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-webapp-11.0.20.jar</dependsOn>

 

[tchart]

If anyone doesnt want to do the above themselves, Ive uploaded the 11.0.20 version to my DropBox.

Unzip and copy the folder, jar and XML to ...\B4J\Libraries

https://ope.nz/public/jserver-11.0.20.zip (replaced Dropbox link)

Refresh your libraries and you should see jServer-11.0.20

 

[alwaysbusy]

I downloaded Jetty 11.0.20 (the zip version) from the project website.

Can you give the link? Thx!

 

[tchart]

Just grab the zip from here

The Eclipse Jetty Project :: Eclipse Jetty

eclipse.dev

Updated the link above from Dropbox to my web site

 

[tchart]

jServer with Jetty 11.0.21

https://ope.nz/public/jserver-11.0.21.zip

Changelog​

• #11782 - HttpExchange retained by HttpSenderOverHTTP which caused memory leak (@shaoxt)
• #11634 - Socks5Proxy does not support IP addresses with IP segments above 127 (@MarcinKozak005)
• #10805 - Jetty response with an invalid HTTP2 packet if the client set the hpack table size as 0
• #11527 - Reduce ByteBuffer churning in HttpOutput
• #11656 Upgrade jetty-quiche-native to version 0.21.0

 

[tchart]

jServer with Jetty 11.0.24

https://ope.nz/public/jserver-11.0.24.zip

Changelog (11.0.24)​

• #12201 backport ThreadLimitHandler improvements from Jetty 12

Changelog (11.0.23)​

• #12156 Improvements to HttpConnection when reading 0 bytes
• #12041 backport tracking retainable pool from Jetty 12

Changelog (11.0.22)​

• #11939 - Updating URL refs from eclipse.org/jetty and eclipse.dev/jetty to jetty.org (including XML dtd references)