This is an automated email from the ASF dual-hosted git repository.
chenhang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/bookkeeper.git
The following commit(s) were added to refs/heads/master by this push:
new c1b7f76d77 Update Jetty dependency. (#4141)
c1b7f76d77 is described below
commit c1b7f76d77267c0ac10e8a0e80a2890191aaae84
Author: Anup Ghatage <[email protected]>
AuthorDate: Sun Dec 3 17:55:00 2023 -0800
Update Jetty dependency. (#4141)
9.4.51 needs to be updated due to
- https://nvd.nist.gov/vuln/detail/CVE-2023-40167
- https://security.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-5958847
Co-authored-by: Anup Ghatage <[email protected]>
---
bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt | 14 +++++++-------
.../src/main/resources/LICENSE-server.bin.txt | 14 +++++++-------
bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt | 16 ++++++++--------
bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt | 16 ++++++++--------
pom.xml | 2 +-
5 files changed, 31 insertions(+), 31 deletions(-)
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
index ac7b175926..979ab63141 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -263,13 +263,13 @@ Apache Software License, Version 2.
- lib/org.apache.zookeeper-zookeeper-3.8.3.jar [21]
- lib/org.apache.zookeeper-zookeeper-jute-3.8.3.jar [21]
- lib/org.apache.zookeeper-zookeeper-3.8.3-tests.jar [21]
-- lib/org.eclipse.jetty-jetty-http-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-io-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-security-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-server-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-servlet-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-util-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-util-ajax-9.4.51.v20230217.jar [22]
+- lib/org.eclipse.jetty-jetty-http-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-io-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-security-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-server-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-servlet-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-util-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-util-ajax-9.4.53.v20231009.jar [22]
- lib/org.rocksdb-rocksdbjni-7.9.2.jar [23]
- lib/com.beust-jcommander-1.82.jar [24]
- lib/com.yahoo.datasketches-memory-0.8.3.jar [25]
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
index 4a2ee1a803..c7d0a3c532 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -263,13 +263,13 @@ Apache Software License, Version 2.
- lib/org.apache.zookeeper-zookeeper-3.8.3.jar [21]
- lib/org.apache.zookeeper-zookeeper-jute-3.8.3.jar [21]
- lib/org.apache.zookeeper-zookeeper-3.8.3-tests.jar [21]
-- lib/org.eclipse.jetty-jetty-http-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-io-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-security-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-server-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-servlet-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-util-9.4.51.v20230217.jar [22]
-- lib/org.eclipse.jetty-jetty-util-ajax-9.4.51.v20230217.jar [22]
+- lib/org.eclipse.jetty-jetty-http-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-io-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-security-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-server-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-servlet-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-util-9.4.53.v20231009.jar [22]
+- lib/org.eclipse.jetty-jetty-util-ajax-9.4.53.v20231009.jar [22]
- lib/org.rocksdb-rocksdbjni-7.9.2.jar [23]
- lib/com.beust-jcommander-1.82.jar [24]
- lib/com.yahoo.datasketches-memory-0.8.3.jar [25]
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
index d6c8527de8..c2c5a5dd3d 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
@@ -92,13 +92,13 @@ SoundCloud Ltd. (http://soundcloud.com/).
This product includes software developed as part of the
Ocelli project by Netflix Inc. (https://github.com/Netflix/ocelli/).
------------------------------------------------------------------------------------
-- lib/org.eclipse.jetty-jetty-http-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-io-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-security-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-server-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-servlet-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-util-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-util-ajax-9.4.51.v20230217.jar
+- lib/org.eclipse.jetty-jetty-http-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-io-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-security-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-server-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-servlet-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-util-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-util-ajax-9.4.53.v20231009.jar
==============================================================
Jetty Web Container
@@ -120,7 +120,7 @@ Jetty is dual licensed under both
Jetty may be distributed under either license.
-lib/org.eclipse.jetty-jetty-util-9.4.51.v20230217.jar bundles UnixCrypt
+lib/org.eclipse.jetty-jetty-util-9.4.53.v20231009.jar bundles UnixCrypt
The UnixCrypt.java code implements the one way cryptography used by
Unix systems for simple password protection. Copyright 1996 Aki Yoshida,
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
index ce26e8bb26..5ec576ceb6 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
@@ -74,13 +74,13 @@ SoundCloud Ltd. (http://soundcloud.com/).
This product includes software developed as part of the
Ocelli project by Netflix Inc. (https://github.com/Netflix/ocelli/).
------------------------------------------------------------------------------------
-- lib/org.eclipse.jetty-jetty-http-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-io-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-security-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-server-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-servlet-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-util-9.4.51.v20230217.jar
-- lib/org.eclipse.jetty-jetty-util-ajax-9.4.51.v20230217.jar
+- lib/org.eclipse.jetty-jetty-http-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-io-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-security-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-server-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-servlet-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-util-9.4.53.v20231009.jar
+- lib/org.eclipse.jetty-jetty-util-ajax-9.4.53.v20231009.jar
==============================================================
Jetty Web Container
@@ -102,7 +102,7 @@ Jetty is dual licensed under both
Jetty may be distributed under either license.
-lib/org.eclipse.jetty-jetty-util-9.4.51.v20230217.jar bundles UnixCrypt
+lib/org.eclipse.jetty-jetty-util-9.4.53.v20231009.jar bundles UnixCrypt
The UnixCrypt.java code implements the one way cryptography used by
Unix systems for simple password protection. Copyright 1996 Aki Yoshida,
diff --git a/pom.xml b/pom.xml
index 60667c6eb1..3ee1f6a768 100644
--- a/pom.xml
+++ b/pom.xml
@@ -140,7 +140,7 @@
<hdrhistogram.version>2.1.10</hdrhistogram.version>
<jackson.version>2.13.4.20221013</jackson.version>
<jcommander.version>1.82</jcommander.version>
- <jetty.version>9.4.51.v20230217</jetty.version>
+ <jetty.version>9.4.53.v20231009</jetty.version>
<jmh.version>1.19</jmh.version>
<jmock.version>2.8.2</jmock.version>
<jsoup.version>1.14.3</jsoup.version>
