Hi, I backported the changes to Wicket 9 [1] and 8 [2]. Wicket 9 build and tests are ok, but Wicket 8 backport PR triggered no pipeline and needs to be tested with Java 8.
1 - https://github.com/apache/wicket/pull/1450 2 - https://github.com/apache/wicket/pull/1451 Pedro Santos On Fri, May 8, 2026 at 5:38 AM Andrea Del Bene <[email protected]> wrote: > Hi, a backport for 9.x is on its way, for the 8.x branch we still have > to analyze the feasibility. > > On Fri, May 8, 2026 at 7:44 AM Harald Kuhn <[email protected]> > wrote: > > > > Hi, > > > > I would also like to know if there are any plans to back port these to > Wicket 9.x? > > > > Best Regards, > > Harald > > > > On 2026/05/06 18:35:04 Scott Fitzpatrick wrote: > > > Hi - > > > > > > Do you know if these security fixes will be back ported to Wicket 8.x? > > > > > > I know here it states that security fixes will be applied when > possible: https://wicket.apache.org/start/wicket-8.x.html > > > > > > Thank you! > > > > > > Sent from my iPhone > > > > > > > On May 6, 2026, at 2:26 PM, Ernesto Reinaldo Barreiro < > [email protected]<mailto:[email protected]>> wrote: > > > > > > > > Hi, > > > > > > > > In https://www.openwall.com/lists/oss-security/2026/05/06/2 it is > stated > > > > that this was fixed for wicket 10.9.0... but I can't find the > corresponding > > > > ISSUE > > > > > > > > -- > > > > Regards - > > > > Ernesto Reinaldo Barreiro > > > > Apache Wicket Committer > > > > > __________________________________________ > > > > Harald Kuhn > > Principal Software Engineer > > > > T +49 (0)911 / 93 788 - 0 > > > > www.turnfriendly.com<http://www.turnfriendly.com> > > > > > > TurnFriendly Software GmbH · Schillstraße 4 · 90491 Nürnberg > > Sitz: Nürnberg · Registergericht: AG Nürnberg, HRB 35447 > > Geschäftsführer: Marco Rothberg, Sebastian Seyler > > > > > -- > Andrea Del Bene. > Apache Wicket committer. >
