Eclipse Community Forums: Newcomers » Upgrading old Jetty-versions inside integrated application packages?

Home » Newcomers » Newcomers » Upgrading old Jetty-versions inside integrated application packages?(How to update (non-secure) Jetty-versions which exist just as separate libraries)

Show: Today's Messages :: Show Polls :: Message Navigator

Upgrading old Jetty-versions inside integrated application packages? [message #1822892]

Mon, 16 March 2020 12:44

Jarmo Sallinen

Messages: 1
Registered: March 2020

Junior Member

Hello,

We are having installed the following combinations of external/separate software and then Jetty "integrated" as part of this separate SWs installation package:

Separate SW: Apache ServiceMix 3.4
Integrated Jetty-version: 7.3.1.v20110307

Separate SW: i-net Clear Reports v.2011 (with web browser UI-version)
Integrated Jetty-version: 6.1.22

Both of these Jetty-versions are old and having vulnerability issues (as you most probably know). But for example in that latter case, in the whole application package we just have files 'ccjetty.jar' and 'ccjetty.util' of Jetty. How should we proceed with updating just Jetty to newer/secure version, especially as we cannot update the integrated, actual SW? (such as Apache ServiceMix or Clear Reports, due to various reasons updating them is not possible). If we try to update those 'ccjetty.jar' and 'ccjetty.util'-files, how do we make sure that we can revert back the existing/working file versions, in case the SW won't work after this update?

Thanks in advance for your help!
BR,
Jarmo

Report message to a moderator

Re: Upgrading old Jetty-versions inside integrated application packages? [message #1822909 is a reply to message #1822892]

Mon, 16 March 2020 16:01

Ed Merks

Messages: 30993
Registered: July 2009

Senior Member

This is a deeply technical issue involving software that few will know in detail. It's unlikely anyone with detailed knowledge of these things will see your post here. No doubt you need to just try it and test it to confirm that the newer versions work well. You might try a Jetty-specific mailing list:

https://www.eclipse.org/jetty/mailinglists.html

Report message to a moderator

Previous Topic:	XML outline tree browser - changing a color
Next Topic:	Eclipse Ignores Include Paths

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun Mar 29 16:21:37 GMT 2020

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter