Hi, a backport for 9.x is on its way, for the 8.x branch we still have to analyze the feasibility.
On Fri, May 8, 2026 at 7:44 AM Harald Kuhn <[email protected]> wrote: > > Hi, > > I would also like to know if there are any plans to back port these to Wicket > 9.x? > > Best Regards, > Harald > > On 2026/05/06 18:35:04 Scott Fitzpatrick wrote: > > Hi - > > > > Do you know if these security fixes will be back ported to Wicket 8.x? > > > > I know here it states that security fixes will be applied when possible: > > https://wicket.apache.org/start/wicket-8.x.html > > > > Thank you! > > > > Sent from my iPhone > > > > > On May 6, 2026, at 2:26 PM, Ernesto Reinaldo Barreiro > > > <[email protected]<mailto:[email protected]>> wrote: > > > > > > Hi, > > > > > > In https://www.openwall.com/lists/oss-security/2026/05/06/2 it is stated > > > that this was fixed for wicket 10.9.0... but I can't find the > > > corresponding > > > ISSUE > > > > > > -- > > > Regards - > > > Ernesto Reinaldo Barreiro > > > Apache Wicket Committer > > > __________________________________________ > > Harald Kuhn > Principal Software Engineer > > T +49 (0)911 / 93 788 - 0 > > www.turnfriendly.com<http://www.turnfriendly.com> > > > TurnFriendly Software GmbH · Schillstraße 4 · 90491 Nürnberg > Sitz: Nürnberg · Registergericht: AG Nürnberg, HRB 35447 > Geschäftsführer: Marco Rothberg, Sebastian Seyler > -- Andrea Del Bene. Apache Wicket committer.
