This is an automated email from the ASF dual-hosted git repository.

gurwls223 pushed a commit to branch branch-3.2
in repository https://gitbox.apache.org/repos/asf/spark.git


The following commit(s) were added to refs/heads/branch-3.2 by this push:
     new f0844f7  [SPARK-36432][BUILD] Upgrade Jetty version to 9.4.43
f0844f7 is described below

commit f0844f70b11f5e7d0a3efb5a30abf9edb478d19b
Author: Sajith Ariyarathna <[email protected]>
AuthorDate: Mon Aug 9 10:14:07 2021 +0900

    [SPARK-36432][BUILD] Upgrade Jetty version to 9.4.43
    
    ### What changes were proposed in this pull request?
    This PR upgrades Jetty version to `9.4.43.v20210629`.
    
    ### Why are the changes needed?
    To address vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34429 
which affects Jetty `9.4.42.v20210604`.
    
    ### Does this PR introduce _any_ user-facing change?
    No
    
    ### How was this patch tested?
    CI
    
    Closes #33656 from this/upgrade-jetty-9.4.43.
    
    Lead-authored-by: Sajith Ariyarathna <[email protected]>
    Co-authored-by: Sajith Ariyarathna <[email protected]>
    Signed-off-by: Hyukjin Kwon <[email protected]>
    (cherry picked from commit 5a22f9ceaf4fa61e4c2d3ad47e7bf5071c0d6eaa)
    Signed-off-by: Hyukjin Kwon <[email protected]>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 954b703c..891ed6f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -138,7 +138,7 @@
     <derby.version>10.14.2.0</derby.version>
     <parquet.version>1.12.0</parquet.version>
     <orc.version>1.6.9</orc.version>
-    <jetty.version>9.4.42.v20210604</jetty.version>
+    <jetty.version>9.4.43.v20210629</jetty.version>
     <jakartaservlet.version>4.0.3</jakartaservlet.version>
     <chill.version>0.10.0</chill.version>
     <ivy.version>2.5.0</ivy.version>

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to