Re: [Geoserver-users] Set aside time for a GeoServer update this Tuesday

[Andrea A. <and...@ge...>]

On Wed, Jul 3, 2024 at 9:46 PM Jody Garnett <jod...@gm...> wrote:

> But my prime question was that I found a reference stating that for
>> NCSC-2024-0274 there where fixes released for 2.25, 2.24, 2.23, 2.21.
>> Version 2.22 was missing in this list and if there was a reason for that or
>> that we could use the fixes o versie 2.21 als on 2.22.
>>
> When a new vulnerability is known and a fix is merged, commercial support
providers have the time to
contact their clients, advise that a patch is needed (without further
details), and perform a timely delivery for it.
In the case of GeoSolutions, we enumerated all clients, found the ones that
were not in a position to upgrade
to an official release right away, and prepared a hotfix for their specific
version.
As the public announcement went out, we took the occasion to share the hot
fixes with the rest of the community as well.

Cheers
Andrea (GeoSolutions)