Hi! Just wanted to let everyone know that we recently released a new version of trapperkeeper-webserver-jetty9 to clojars. The new version is v1.3.0.
https://clojars.org/puppetlabs/trapperkeeper-webserver-jetty9 In this release, we updated our dependency on Jetty to version v.9.2.10, largely so that we could pick up a security fix in the underlying Jetty libraries that we are dependent upon. In the trapperkeeper-webserver-jetty9 v.1.2.0 release, we were referencing Jetty version v.9.2.8. A critical security vulnerability, which affects Jetty versions v9.2.3 - v9.2.8, was addressed in Jetty v9.2.9. For more on that vulnerability, see https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html. We also made a few adjustments to some of the default values that are used for settings configured on the web server. The intention going forward is for our default values for settings to better align with the defaults that the underlying Jetty libraries use -- as opposed to creating our own project-specific default settings. For more information on the changes in the trapperkeeper-webserver-jetty9 release, see: https://github.com/puppetlabs/trapperkeeper-webserver-jetty9/blob/1.3.0/CHANGELOG.md Thanks! --- Jeremy -- You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups "Clojure" group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
