[
https://issues.apache.org/jira/browse/HADOOP-19912?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18101341#comment-18101341
]
ASF GitHub Bot commented on HADOOP-19912:
-----------------------------------------
pjfanning commented on PR #8653:
URL: https://github.com/apache/hadoop/pull/8653#issuecomment-5165472205
@pan3793 this is targeted at 3.6.0. I have no intention of seeing this
backported to 3.5.
This PR includes migration of the most important javax to jakarta changes.
Latest versions of Jetty and Jersey require Jakarta dependencies as opposed to
Javax.
> Upgrade to Jetty 11 or 12
> -------------------------
>
> Key: HADOOP-19912
> URL: https://issues.apache.org/jira/browse/HADOOP-19912
> Project: Hadoop Common
> Issue Type: Task
> Reporter: PJ Fanning
> Priority: Major
> Labels: pull-request-available
>
> See HADOOP-19910 - there is a CVE in Jetty but releases of 9.4 are rare and
> are 'sponsored' - Jetty 9.4 is not actively maintained. There are some
> commercial forks.
> Jetty 12 needs Java 17+.
> Will also force Jersey to upgraded to 3 or 4.
> And to replace many javax classes/jars with their jakarta equivalents.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
