| Upgrading old Jetty-versions inside integrated application packages? [message #1822892] |
Mon, 16 March 2020 08:44  |
Eclipse User |
|
|
|
Hello,
We are having installed the following combinations of external/separate software and then Jetty "integrated" as part of this separate SWs installation package:
Separate SW: Apache ServiceMix 3.4
Integrated Jetty-version: 7.3.1.v20110307
Separate SW: i-net Clear Reports v.2011 (with web browser UI-version)
Integrated Jetty-version: 6.1.22
Both of these Jetty-versions are old and having vulnerability issues (as you most probably know). But for example in that latter case, in the whole application package we just have files 'ccjetty.jar' and 'ccjetty.util' of Jetty. How should we proceed with updating just Jetty to newer/secure version, especially as we cannot update the integrated, actual SW? (such as Apache ServiceMix or Clear Reports, due to various reasons updating them is not possible). If we try to update those 'ccjetty.jar' and 'ccjetty.util'-files, how do we make sure that we can revert back the existing/working file versions, in case the SW won't work after this update?
Thanks in advance for your help!
BR,
Jarmo
|
|
|
|
Powered by
FUDForum. Page generated in 0.06460 seconds
Home