[ 
https://issues.apache.org/jira/browse/SOLR-7184?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14345324#comment-14345324
 ] 

Shalin Shekhar Mangar commented on SOLR-7184:
---------------------------------------------

bq. Is there a reason why branch_5x is not yet on Jetty 9?

# We were too close to the 5.0 release to port the jetty upgrade to 5.0 from 
trunk
# There are more failures in trunk related to NoHttpResponseException in tests 
that use SocketProxy class on Jetty9. I haven't had the time to really figure 
out why.

> Update Jetty to 9.2.9
> ---------------------
>
>                 Key: SOLR-7184
>                 URL: https://issues.apache.org/jira/browse/SOLR-7184
>             Project: Solr
>          Issue Type: Task
>          Components: Server
>    Affects Versions: Trunk
>            Reporter: Uwe Schindler
>            Assignee: Uwe Schindler
>            Priority: Blocker
>             Fix For: Trunk
>
>         Attachments: SOLR-7184.patch
>
>
> Due to the security leak in the Jetty webserver have to update the branches 
> that use Jetty 9.2.x to latest version 9.2.9:
> - 
> http://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html
> - 
> https://github.com/eclipse/jetty.project/blob/master/advisories/2015-02-24-httpparser-error-buffer-bleed.md



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to