On Wed, Jul 3, 2024 at 9:46 PM Jody Garnett <jody.garn...@gmail.com> wrote:
> But my prime question was that I found a reference stating that for >> NCSC-2024-0274 there where fixes released for 2.25, 2.24, 2.23, 2.21. >> Version 2.22 was missing in this list and if there was a reason for that or >> that we could use the fixes o versie 2.21 als on 2.22. >> > When a new vulnerability is known and a fix is merged, commercial support providers have the time to contact their clients, advise that a patch is needed (without further details), and perform a timely delivery for it. In the case of GeoSolutions, we enumerated all clients, found the ones that were not in a position to upgrade to an official release right away, and prepared a hotfix for their specific version. As the public announcement went out, we took the occasion to share the hot fixes with the rest of the community as well. Cheers Andrea (GeoSolutions)
_______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users