hobbit-project / platform

HOBBIT benchmarking platform
GNU General Public License v2.0
24 stars 9 forks source link

Upgrade or replace jetty #542

Open denkv opened 2 years ago

denkv commented 2 years ago
    You are using an old version of Jetty ...

https://github.com/hobbit-project/platform/blob/7b6e394ca32ee7a126644956c09350853e79e4bc/hobbit-gui/gui-serverbackend/pom.xml#L37

Jetty version 9.3.x was declared End of Life back back in mid 2020. Jetty 9.3.13.v20161014 is also subject to a few vulnerabilities
See: https://www.eclipse.org/jetty/security_reports.php

Jetty versions 9.4.x are now at End of Community Support. See: https://github.com/eclipse/jetty.project/issues/7958

You should be using Jetty 10.x, or Jetty 11.x

Originally posted by @joakime in https://github.com/hobbit-project/platform/issues/8#issuecomment-1284255753

denkv commented 11 months ago

See also: https://github.com/hobbit-project/platform/issues/181