End-of-Life is a natural state for any open-source software that has thrived as long as Jetty and CometD. However, we know that End-of-Life does not mean End-of-Use, and businesses must have a clear path to deal with this situation.
Webtide has charted two paths forward.
The first option continues with our Webtide Lifecycle Support, a comprehensive solution for your developer and production support needs regarding Jetty and CometD, now with private access to EOL releases. This option gives your organization peace of mind, and you may call upon the developers of Jetty and CometD for any development or production needs. If you have migration, performance, or security-related issues, we are here to help. In addition, our Lifecycle Support now supports the Jetty and CometD versions that are available from our partners.
The second option is to obtain binaries from one of our partners. Webtide has started a partnership program through which individuals and businesses that rely on EOL Jetty and EOL CometD versions can obtain CVE resolutions safely, securely, and predictably from the following vendors. We believe this is an excellent option because it allows your organization to address its security needs across multiple dependencies in a single place, not an ad hoc solution.
TuxCare secures the open-source software the world builds on. Today, we protect over 1.2 million workloads – keeping them secure, compliant, and unstoppable at scale. From operating systems to development libraries and production applications, we power your open-source stack with enterprise-grade security and support: endless lifecycle extensions for out-of-support software versions, rebootless patching for every major Linux distro, enterprise-optimized support for community Linux, and our Linux-first vulnerability scanner that cuts through the noise.
HeroDevs is the trusted leader in providing secure, long-term support for deprecated open-source software. Our mission is to keep these critical technologies running smoothly, securely, and in compliance long after their official end-of-life.
- NES for Jetty
- NES for CometD
We are confident that this approach to EoL software will benefit the community by providing clear direction on obtaining up-to-date, secure EoL software.
Briefly, the process works behind the scenes as follows.
- Webtide curates a private fork of Jetty and CometD repositories.
- Webtide will fix issues for Lifecycle Support customers as needed.
- Potential CVE issues are reported through the usual channels.
- Webtide will resolve CVEs and test for performance and stability.
- Our partners will generate new Jetty and CometD release binaries for distribution.
Finally, if you must rely on EOL Jetty and CometD binaries, we encourage you to contact one of our partners for a binary solution or Webtide for a comprehensive support solution.