[jira] [Commented] (SOLR-15316) Update Jetty to at least 9.4.39

["Cassandra Targett (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-15316?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17355309#comment-17355309 ] 

Cassandra Targett commented on SOLR-15316:
------------------------------------------

Does anyone have a plan to try to do this before 8.9 release?

There are a few CVEs fixed in 9.3.39 also, referenced in SOLR-15338 and SOLR-15325 (and possibly others).

> Update Jetty to at least 9.4.39
> -------------------------------
>
>                 Key: SOLR-15316
>                 URL: https://issues.apache.org/jira/browse/SOLR-15316
>             Project: Solr
>          Issue Type: Task
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: Server
>    Affects Versions: main (9.0)
>            Reporter: Mike Drob
>            Priority: Blocker
>
> We should make sure we are on the latest Jetty before we release.
> Our current version (9.4.34) has a division by zero bug for resizing thread pools that triggers on unit tests every few days.
> We can update this now or some time closer to release.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org