On Wed, Jul 3, 2024 at 9:46 PM Jody Garnett <jody.garn...@gmail.com> wrote:

> But my prime question was that I found a reference stating that for
>> NCSC-2024-0274 there where fixes released for 2.25, 2.24, 2.23, 2.21.
>> Version 2.22 was missing in this list and if there was a reason for that or
>> that we could use the fixes o versie 2.21 als on 2.22.
>>
> When a new vulnerability is known and a fix is merged, commercial support
providers have the time to
contact their clients, advise that a patch is needed (without further
details), and perform a timely delivery for it.
In the case of GeoSolutions, we enumerated all clients, found the ones that
were not in a position to upgrade
to an official release right away, and prepared a hotfix for their specific
version.
As the public announcement went out, we took the occasion to share the hot
fixes with the rest of the community as well.

Cheers
Andrea (GeoSolutions)
_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to