Hi Doug, It’s already done in Pax Web.
I just have to cut Karaf 4.3.1 release. But the way, Karaf by itself doesn’t define Jetty anymore: he leverages Pax Web or Felix Jetty. Regards JB > Le 25 janv. 2021 à 17:28, Jackson, Douglas <[email protected]> a > écrit : > > Hi! > There seems to be a security defect against the Jetty Server used by karaf > 4.3.0. > In order to avoid it, we would need to upgrade to 9.4.36 or similar. > Are there any plans to upgrade the Jetty used by karaf 4.3.x? > Thanks, > Doug
