[Archivesspace_Users_Group] Jetty out of date - critical vulnerability

[Christine Di Bella]

Most of the information is in the email that was posted. I will send some additional information to people who request it, including Peter and Andrew. Please email me (christine.dibella at lyrasis.org) if you want to be included.

Christine
________________________________
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Andrew Morrison <andrew.morrison at bodleian.ox.ac.uk>
Sent: Thursday, October 28, 2021 5:11:47 AM
To: archivesspace_users_group at lyralists.lyrasis.org <archivesspace_users_group at lyralists.lyrasis.org>
Subject: Re: [Archivesspace_Users_Group] Jetty out of date - critical vulnerability

I concur that more information, sent via less public channels, would be
useful.

Andrew.


On 10/28/21 08:35, Peter Heiner wrote:
> Christine Di Bella wrote on 2021-10-27 20:04:00:
>> Given the sensitivity, we maintain security issues in a non-public JIRA.
> This effectively prevents the community from getting involved and even to look
> for possible mitigations on their own. At the very least, could the links
> mentioned that describe the vulnerability be posted to the list, please?
>
> Thanks,
> p
> _______________________________________________
> Archivesspace_Users_Group mailing list
> Archivesspace_Users_Group at lyralists.lyrasis.org
> http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group
_______________________________________________
Archivesspace_Users_Group mailing list
Archivesspace_Users_Group at lyralists.lyrasis.org
http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20211028/2340c5b8/attachment.html>