Updating for published CVEs

jetty · Oct 14, 2024 · 1db7743 · 1db7743
1 parent 6804eb7
commit 1db7743
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/VERSION.txt b/VERSION.txt
@@ -1,15 +1,15 @@
 jetty-9.4.57-SNAPSHOT
 
 jetty-9.4.56.v20240826 - 26 August 2024
- + 12200 Backport ThreadLimitHandler improvements from Jetty 12
+ + 12200 Backport ThreadLimitHandler improvements from Jetty 12 (CVE-2024-8184)
 
 jetty-9.4.55.v20240627 - 27 June 2024
  + 10805 Jetty response with an invalid HTTP2 packet if the client set the
    hpack table size as 0
  + 11917 Update XML configure.dtd locations to new jetty.org website
 
 jetty-9.4.54.v20240208 - 08 February 2024
- + 1256 DoSFilter leaks USER_AUTH entries
+ + 1256 DoSFilter leaks USER_AUTH entries (CVE-2024-9823)
  + 11259 HTTP/2 connection not closed after idle timeout when TCP congested
    (CVE-2024-22201)
  + 11389 Strip default ports on ws/wss scheme uris too