You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@zookeeper.apache.org by "anmolnar (via GitHub)" <gi...@apache.org> on 2026/01/28 16:50:21 UTC
[PR] ZOOKEEPER-5018 Upgrade Jetty to 9.4.58.v20250814 in order to fix CVE-2025-5115 (ADDENDUM) [zookeeper]
anmolnar opened a new pull request, #2351:
URL: https://github.com/apache/zookeeper/pull/2351
Looks like I didn't notice that we have a separate version in Prometheus Metrics Provider.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-5018 Upgrade Jetty to 9.4.58.v20250814 in order to fix CVE-2025-5115 (ADDENDUM) [zookeeper]
Posted by "PDavid (via GitHub)" <gi...@apache.org>.
PDavid commented on code in PR #2351:
URL: https://github.com/apache/zookeeper/pull/2351#discussion_r2740352410
##########
zookeeper-metrics-providers/zookeeper-prometheus-metrics/pom.xml:
##########
@@ -33,7 +33,7 @@
<properties>
<prometheus.version>1.3.10</prometheus.version>
- <jetty.version>9.4.57.v20241219</jetty.version>
Review Comment:
I know that this is already merged, just wondering: Would it maybe make sense for the Prometheus Metrics Provider to use the Jetty version declared in the root `pom.xml`?
Or is there a certain advantage that the Prometheus Metrics Provider declares it's own Jetty version here?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-5018 Upgrade Jetty to 9.4.58.v20250814 in order to fix CVE-2025-5115 (ADDENDUM) [zookeeper]
Posted by "anmolnar (via GitHub)" <gi...@apache.org>.
anmolnar merged PR #2351:
URL: https://github.com/apache/zookeeper/pull/2351
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org