[jetty-dev] Security Issues Jetty 9 / Older Version effected ?

[Frank Simon <fs@xxxxxxxxxxxxxxx>]

Dear Jetty Community,

we saw this morning the following notice:

http://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html

Obviously Jetty 9 is effected. We still use Jetty 6 (yes we know, but to switch to jetty 8 or 9 is not a small task).

In earlier times there was a great overview:

http://wiki.eclipse.org/Jetty/Jetty_Security_Reports#Known_Jetty_6_Issues

but it seems it not maintained anymore. Any other overviews regarding Jetty Security Issues ?

Frank
--
ECCE TERRAM					E-Mail: fs@xxxxxxxxxxxxxxx
DE: +49 441 500 12 0				NZ:  +64 9 304 0709
US: + 1 415 609 0380				Fax: +49 441 500 12 29
www.ecce-terram.info				Ex Astris Scientia