-
Improvement
-
Resolution: Fixed
-
Major
Problem
Jenkins core currently depends on Jetty 9.4.x. At the time of this writing, the latest version of Jetty that is compatible with existing plugin Servlet API usage is Jetty 10.x. This version of Jetty requires Java 11.
Solution
Upgrade Jetty from 9.4.x to 10.0.x (at the time of this writing, 10.0.9) in Jenkins core.
Success criteria
The success criteria for this ticket are as follows:
- Winstone released with the latest version of Jetty 10.0.x (at the time of this writing, 10.0.9)
- Jenkins core upgraded to the abovementioned release of Winstone
- jetty-maven-plugin in core upgraded to the same version of Jetty as the abovementioned release of Winstone
- Weekly release shipped with the above changes
- depends on
-
JENKINS-67688 Java 11 Phase 5: Require Java 11 or newer
- Closed
- is related to
-
JENKINS-69074 Winstone 5.25 affected by CVE-2022-2047 ; 2048
- Closed
- links to