B4J Question jServer 4 - Keeping Jetty Up to Date

tchart · May 15, 2024

Erel,

Given jServer 4 is not a fat JAR are there any implications of updating the versions of the Jetty libraries and modifying the XML?

e.g. can we swap out version 11.0.9 for 11.0.20?

Reason being there are several CVEs that relate to Jetty 11 up to 11.0.15

Alternatively, can the jServer 4 source be added to your GitHub (I didnt see it there) so I can build it myself?

Thanks

Erel · May 16, 2024

jServer source code: https://github.com/AnywhereSoftware/B4J/tree/master/Libs_Server/src/anywheresoftware/b4j/object
And you don't really need it as minor versions are usually backward compatible.

Just update the XML file.

tchart · May 16, 2024

Thanks Erel. I have tested 11.0.20 and it works!

I copied the jar/xml, renamed to jServer-11.0.20, created a folder called jserver-11.0.20 and updated the XML as required.

I downloaded Jetty 11.0.20 (the zip version) from the project website. Unzipped and copied the libraries across. NOTE the libraries are split across multiple directories in the zip file but need to be placed in the single "jserver-11.0.20" folder

XML:

<version>11.20</version>
    <dependsOn>c3p0-0.9.5.2</dependsOn>
    <dependsOn>c3p0-oracle-thin-extras-0.9.5.2</dependsOn>
    <dependsOn>mchange-commons-java-0.2.11</dependsOn>
    <dependsOn>json</dependsOn>
    <dependsOn>jserver-11.0.20/http2-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/http2-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-alpn-java-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-alpn-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-io-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-jakarta-servlet-api-5.0.2.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-jakarta-websocket-api-2.0.0.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-servlet-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-servlets-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-slf4j-impl-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-util-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/slf4j-api-2.0.9.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-core-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-core-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jakarta-client-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jakarta-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jakarta-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jetty-api-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jetty-common-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-jetty-server-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/websocket-servlet-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-http-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-security-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/http2-hpack-11.0.20.jar</dependsOn>
    <dependsOn>jserver-11.0.20/jetty-webapp-11.0.20.jar</dependsOn>

tchart · May 17, 2024

If anyone doesnt want to do the above themselves, Ive uploaded the 11.0.20 version to my DropBox.

Unzip and copy the folder, jar and XML to ...\B4J\Libraries

https://ope.nz/public/jserver-11.0.20.zip (replaced Dropbox link)

Refresh your libraries and you should see jServer-11.0.20

alwaysbusy · May 17, 2024

tchart said:
I downloaded Jetty 11.0.20 (the zip version) from the project website.

Can you give the link? Thx!

tchart · May 17, 2024

Just grab the zip from here

The Eclipse Jetty Project :: Eclipse Jetty

eclipse.dev

Updated the link above from Dropbox to my web site

tchart · Jun 12, 2024

jServer with Jetty 11.0.21

https://ope.nz/public/jserver-11.0.21.zip

Changelog

#11782 - HttpExchange retained by HttpSenderOverHTTP which caused memory leak (@shaoxt)
#11634 - Socks5Proxy does not support IP addresses with IP segments above 127 (@MarcinKozak005)
#10805 - Jetty response with an invalid HTTP2 packet if the client set the hpack table size as 0
#11527 - Reduce ByteBuffer churning in HttpOutput
#11656 Upgrade jetty-quiche-native to version 0.21.0

tchart · Dec 2, 2024

jServer with Jetty 11.0.24

https://ope.nz/public/jserver-11.0.24.zip

Changelog (11.0.24)

#12201 backport ThreadLimitHandler improvements from Jetty 12

Changelog (11.0.23)

#12156 Improvements to HttpConnection when reading 0 bytes
#12041 backport tracking retainable pool from Jetty 12

Changelog (11.0.22)

#11939 - Updating URL refs from eclipse.org/jetty and eclipse.dev/jetty to jetty.org (including XML dtd references)

B4J Question jServer 4 - Keeping Jetty Up to Date

tchart

Well-Known Member

Erel

B4X founder

tchart

Well-Known Member

tchart

Well-Known Member

alwaysbusy

Expert

tchart

Well-Known Member

The Eclipse Jetty Project :: Eclipse Jetty

tchart

Well-Known Member

Changelog

tchart

Well-Known Member

Changelog (11.0.24)

Changelog (11.0.23)

Changelog (11.0.22)

B4J Question jServer 4 - Keeping Jetty Up to Date

Well-Known Member

B4X founder

Well-Known Member

Well-Known Member

Expert

Well-Known Member

Well-Known Member

Changelog​

Well-Known Member

Changelog (11.0.24)​

Changelog (11.0.23)​

Changelog (11.0.22)​

Privacy & Transparency

Privacy & Transparency

Changelog

Changelog (11.0.24)

Changelog (11.0.23)

Changelog (11.0.22)