Hi Francisco

The SP tags are done in Red Hat internal product repositories.

The 2.1.0.Final? is uploaded to the github.repo.

Regards,

Flavia

On Wed, Apr 22, 2020 at 9:59 AM Francisco A. Lozano <flozano@gmail.com> wrote:

Hi,
With regard to https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757:

- I can't find 2.0.30.sp1 and 2.1.0 final tags in https://github.com/undertow-io/undertow .
- In binary form, I can find 2.1.0.Final? in maven central repository, but 2.0.30.sp1 is not available there either.

Francisco A. Lozano
_______________________________________________
undertow-dev mailing list
undertow-dev@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev

Flavia Rainone

Principal Software Engineer

Red Hat

frainone@redhat.com