Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[jetty-users] Security Advisory GHSA-2fvj-hgj9-j2gr?
  • From: Joerg Hoh <jhoh@xxxxxxxxx>
  • Date: Mon, 14 Sep 2026 07:47:32 +0000
  • Accept-language: de-DE, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=adobe.com; dmarc=pass action=none header.from=adobe.com; dkim=pass header.d=adobe.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=LqblKgNUtqD8ZOqOdA+I+H59R4/7lDwTs1JY9VY6QIc=; b=KO8RJJQ7upsq+MmLrktyFVA6WREU8lXRYImU+E7Wn5m+b0ptTpn4nXLHfMumSZIwIsK/p+P4cRxbWLVaIPkzCsRjiNtffONxvROAdMEgvCVBwJRjiZa3LJtS+dYz8Afhx8NXMdfaDSfOFVzo4dlPqAYBFptAvUib1IjRP7aDVzyK0rcQ69DUWRKgTz3T2FTDM1v1kBhb5d7uT+UuOunvfRmQgVWeJ8M8BbF0/vy/Avr7JfnBiYs3IsZv+GjxxnH4+iyf4kbX68z4/bZMewsiZEZZmzL7JPeMWlf9q2nLUeWQgabFNsSFMFaGhjjldXm+qi6/oCfS/b5Ple5YiF6IBA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=UxTPkFTXxWgoFZ+s0vnIyN2hpBUF8HSwCNPYrQtHuGQFGZBdYVDWnVwdxaNJ8gvl415siDdN5ghUefsHYM6seNR+z66XPdluKTUnSsKHhUjD1h3S7seH0ntk3nG5026wP8NvF3OvBj2m0KmzqVMcXuOk9C/uqIDWxcMQI91TYgeNa55gFH2b0ipnMgVM0aTOL84IPBf4FaN3ygG52F54g1Amcilh/9NIETHEJBo7aLBnr3WNQ7jZ4PT0GPLCkl2YmbQnRTO1kUSi4+p4+6wH9D5lx5hsim8YIezy8hLCgWofcf9tBYM5+mZBCn3bLX203xdfVOw4A4r745WeVfUlrw==
  • Delivered-to: jetty-users@xxxxxxxxxxx
  • List-archive: <https://www.eclipse.org/mailman/private/jetty-users/>
  • List-help: <mailto:jetty-users-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/jetty-users>, <mailto:jetty-users-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/jetty-users>, <mailto:jetty-users-request@eclipse.org?subject=unsubscribe>
  • Thread-index: AQHdRBw/sXJMG3g3y0qoMQ4aIGB66A==
  • Thread-topic: Security Advisory GHSA-2fvj-hgj9-j2gr?
Hi,

I have a question regarding the security advisory published at https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr?

It lists these patched versions for org.eclipse.jetty:jetty-security 

9.4.x : 9.4.62
10.0.x: 10.0.31 
11.0.x: 11.0.31

But all of them are not available at Maven Central (https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-security/). They also don’t exist in git.

I understand that these branches are EOL.

My question is: Can you fix your advisory and just list the branches for which patched versions are available? 

Thanks,
Jörg


-- 
Jörg Hoh  
Joerg.Hoh@xxxxxxxxx
Adobe Systems Engineering GmbH - Grosse Elbstrasse 27 - 22767 Hamburg
Sitz der Gesellschaft: Hamburg - Registergericht: Hamburg HRB 745 37 
Geschäftsführer: Michael D. Jamrosy, Christian Keim, Thomas Mührke, Scott Andrew Kennedy

Back to the top