We can update in on master and cut a release
Enrico
Il Mer 4 Giu 2025, 12:40 Chris T. <c.turks...@gmail.com> ha scritto:
> Not updating Jetty will cause issues for companies with strict
> vulnerability scanning and remediation policies. ("fix it or stop using
> it" )
>
> Maybe it's time for a Java17 Zookeeper branch.
>
>
> On 4 June 2025 12:25:51 Andrew A <the22bestand...@gmail.com> wrote:
>
> > Jetty 9-11 stopped getting security updates in January. But, 12 requires
> a
> > minimum Java version of 17.
> >
> > See:
> > https://github.com/jetty/jetty.project/issues/7958
> > https://github.com/jetty/jetty.project/issues/10485
> >
> >
> >
> > On 2025/06/03 20:53:43 Matthias Sohn wrote:
> >
> >> On Tue, Jun 3, 2025 at 6:53 PM Yvette Sermons
> >
> >> <yv...@oracle.com.invalid> wrote:
> >
> >>
> >
> >>> Hello
> >
> >>> Can Zookeeper 3.9.3 be upgraded to use the latest jetty version:
> >
> >>> 9.4.57.v20241219<
> >
> >>>
> >
> https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.57.v20241219
> >>
> >
> >>>
> >
> >>>
> >
> https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.57.v20241219
> >
> >>> There is a vulnerability in 9.4.56 version.
> >
> >>>
> >
> >>
> >
> >> AFAICS all Jetty versions < 12 are EOL. See
> > https://jetty.org/download.html
> >
> >>
> >
> >>
> >
> >>>
> >
> >>> Thanks
> >
> >>> Yvette Sermons | Senior Development Manager
> >
> >>> ORACLE Construction and Engineering
> >
> >>> 610.766.3735
> >
> >>>
> >
> >>
>
>
