[ https://issues.apache.org/jira/browse/HADOOP-16491?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16904301#comment-16904301 ]
Wei-Chiu Chuang commented on HADOOP-16491: ------------------------------------------ Actually, we should start to think about migrate to Jetty 9.4. > Upgrade jetty version to 9.3.27 > ------------------------------- > > Key: HADOOP-16491 > URL: https://issues.apache.org/jira/browse/HADOOP-16491 > Project: Hadoop Common > Issue Type: Task > Affects Versions: 3.2.0 > Reporter: Hrishikesh Gadre > Assignee: Hrishikesh Gadre > Priority: Major > Fix For: 3.3.0 > > Attachments: HADOOP-16491-001.patch > > > The current jetty version (9.3.24) has few CVEs (Ref: > [https://www.cvedetails.com/version/272598/Eclipse-Jetty-9.3.24.html]). It > would be a good idea to upgrade jetty to 9.3.27 (which is the latest version > as of today 08/05/2019). -- This message was sent by Atlassian JIRA (v7.6.14#76016) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org