On Mon, Mar 21, 2011 at 12:41 PM, Gottfrid Linge
<[email protected]>wrote:
> Hello!
>
>
>
> Is there a plan to upgrade to latest Jetty and does anyone know if the
> known security issues for Jetty are that bad?
>
> See security issues:
>
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4612
>
> http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt
>
No plan that I know of. Even after reading the above I'm not too concerned,
I dont' really expect anyone to
do serious production with the Jetty installer, all production setups I've
seen so far use a recent Tomcat
version (or other container of choice) and the GeoServer war packages.
I agree it would be good to upgrade... doing so requires a quite a bit of
work though, we'd have to learn
how to do the stripped down version of Jetty for the current version and
update GeoServer own
testing Jetty (used by developers) to the same version
Feel free to open a improvement request on jira.codehaus.org, hopefully in
time someone will pop up
with enough time and interest in it to go and fix it.
Cheers
Andrea
--
-------------------------------------------------------
Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 962313
mob: +39 333 8128928
http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf
-------------------------------------------------------
------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software
be a part of the solution? Download the Intel(R) Manageability Checker
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users
