Regarding Jetty upgrade in HP ALM servers and supported versions

  • KM03337907
  • 21-Feb-2019
  • 21-Feb-2019

This document is under revision.

Summary

if any customer wants to upgrade the jetty for any security reason this is the answer Supported ALM versions and respectively the Jetty version used by each of them: • ALM 11.5x – Jetty 7.5.4 • ALM 12.00 – Jetty 7.5.4 • ALM 12.2x – Jetty 9.1.4 • ALM 12.5x – Jetty 9.1.4 • ALM 12.6x – Jetty 9.1.4 Everything else besides the versions included would not be supported by us. With not supported we do not mean that it would not work, but that we could not guarantee if everything will be running as expected since it was not Quality Assured by our QA team. For this reason I don’t have any setps about how to upgrade as this whole procees is out of support I hope this answers your question, if you have any other question please feel free to ask Best regards

Question

Hi Team,
As per the monthly vulnerability scan, we have received the below 2 vulnerability in the server. As a solution for this Vulnerabilities we are advised to upgrade the jetty to jetty-9.4.15.v20190215. Can you please confirm whether the upgrade of the jetty will not affect the functionality of the application also can you please provide us the steps to upgrade jetty for HP ALM.
Jetty Multiple Remote Vulnerabilities
Eclipse Jetty Multiple Vulnerabilities
Thanks in advance.
Best Regards,
Nithin Joseph

Answer

*************************************SS**********
Regarding your question
Supported ALM versions and respectively the Jetty version used by each of them:
• ALM 11.5x – Jetty 7.5.4
• ALM 12.00 – Jetty 7.5.4
• ALM 12.2x – Jetty 9.1.4
• ALM 12.5x – Jetty 9.1.4
• ALM 12.6x – Jetty 9.1.4
Everything else besides the versions included would not be supported by us. With not supported we do not mean that it would not work, but that we could not guarantee if everything will be running as expected since it was not Quality Assured by our QA team.
For this reason I don’t have any setps about how to upgrade as this whole procees is out of support
I hope this answers your question, if you have any other question please feel free to ask
Best regards