Skip to content

[SPARK-30318] [Core] Upgrade jetty to 9.3.27.v20190418 - #26967

Closed
sandeep-katta wants to merge 1 commit into
apache:branch-2.4from
sandeep-katta:jettyUpgrade
Closed

[SPARK-30318] [Core] Upgrade jetty to 9.3.27.v20190418#26967
sandeep-katta wants to merge 1 commit into
apache:branch-2.4from
sandeep-katta:jettyUpgrade

Conversation

@sandeep-katta

@sandeep-kattasandeep-katta commented Dec 20, 2019

Copy link
Copy Markdown
Contributor

What changes were proposed in this pull request?

Upgrade jetty to 9.3.27.v20190418 to fix below CVE

https://nvd.nist.gov/vuln/detail/CVE-2019-10247
https://nvd.nist.gov/vuln/detail/CVE-2019-10241

tag: https://github.com/eclipse/jetty.project/releases/tag/jetty-9.3.27.v20190418

Why are the changes needed?

To fix CVE-2019-10247 and CVE-2019-10241

Does this PR introduce any user-facing change?

No

How was this patch tested?

Existing Test

@sandeep-katta
sandeep-katta changed the base branch from master to branch-2.4December 20, 2019 13:39
@sandeep-katta

Copy link
Copy Markdown
ContributorAuthor

@SparkQA

Copy link
Copy Markdown

Test build #4969 has finished for PR 26967 at commit 7256920.

  • This patch passes all tests.
  • This patch merges cleanly.
  • This patch adds no public classes.

srowen pushed a commit that referenced this pull request Dec 21, 2019
### What changes were proposed in this pull request?
Upgrade jetty to 9.3.27.v20190418 to fix below CVE
https://nvd.nist.gov/vuln/detail/CVE-2019-10247https://nvd.nist.gov/vuln/detail/CVE-2019-10241
tag: https://github.com/eclipse/jetty.project/releases/tag/jetty-9.3.27.v20190418
### Why are the changes needed?
To fix CVE-2019-10247 and CVE-2019-10241
### Does this PR introduce any user-facing change?
No
### How was this patch tested?
Existing Test
Closes#26967 from sandeep-katta/jettyUpgrade.
Authored-by: sandeep katta <sandeep.katta2007@gmail.com>
Signed-off-by: Sean Owen <srowen@gmail.com>
@srowen

Copy link
Copy Markdown
Member

Merged to 2.4

@dongjoon-hyundongjoon-hyun left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1, late LGTM. Thank you, @sandeep-katta and @srowen .

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@sandeep-katta@SparkQA@srowen@dongjoon-hyun