[jetty-users] Jetty CVE Fix Tracking

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[jetty-users] Jetty CVE Fix Tracking

From: Wang Yicheng <wangyicheng1209@xxxxxxxxx>
Date: Tue, 5 Nov 2024 18:17:48 -0800
Delivered-to: jetty-users@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/jetty-users/>
List-help: <mailto:jetty-users-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/jetty-users>, <mailto:jetty-users-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/jetty-users>, <mailto:jetty-users-request@eclipse.org?subject=unsubscribe>

Hi team,

Could someone help clarify how Jetty handles all CVE fixes? I wasn’t able to find a central place listing all resolved CVEs. I did notice that the VERSION.txt file in the release package includes some Git commit comments mentioning CVEs, but it doesn’t seem to provide a complete list.

If a centralized list isn’t currently available, would it be possible to start tracking all CVE fixes in the release README or VERSION.txt?

Thank you!

Best,

Yicheng

Follow-Ups:
- Re: [jetty-users] Jetty CVE Fix Tracking
  - From: Greg Wilkins

Prev by Date: Re: [jetty-users] Problem when trying to mix a Jetty-12 ee8 Servlet and Jetty Handler s
Next by Date: Re: [jetty-users] Jetty CVE Fix Tracking
Previous by thread: [jetty-users] Problem when trying to mix a Jetty-12 ee8 Servlet and Jetty Handler s
Next by thread: Re: [jetty-users] Jetty CVE Fix Tracking
Index(es):
- Date
- Thread

Breadcrumbs