[ 
https://issues.apache.org/jira/browse/FLUME-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15575171#comment-15575171
 ] 

Tristan Stevens commented on FLUME-2698:
----------------------------------------

Further issues: It seems that the Avro-IPC package includes Jetty 6 and the 
Thrift dependency includes httpcore 4.1.3.

As such, this is probably less trivial than it initially looks and may need 
upstream changes to Avro-IPC before we can proceed.

Lastly, Jetty 9.3/9.4 (9.4 is latest) requires JDK8 and we're only using JDK7.

> Upgrade Jetty Version
> ---------------------
>
>                 Key: FLUME-2698
>                 URL: https://issues.apache.org/jira/browse/FLUME-2698
>             Project: Flume
>          Issue Type: Bug
>          Components: Web
>    Affects Versions: v1.6.0, v1.5.1, v1.7.0
>            Reporter: Joakim Erdfelt
>
> Flume depends on Jetty 6
> {code:xml}
>       <dependency>
>         <groupId>org.mortbay.jetty</groupId>
>         <artifactId>jetty-util</artifactId>
>         <version>6.1.26</version>
>       </dependency>
> {code}
> Which was EOL (End of Life) back in 2010 and is no longer fit for production 
> use (without heavy customizations and modifications like Google does for GAE, 
> just to keep it safe and vulnerability free)
> Jetty was moved to Eclipse.org back during the Jetty 7 days.
> http://eclipse.org/jetty/
> Note that [Jetty 7 and Jetty 8 are now also 
> EOL|https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00069.html] (as 
> of 2014)
> Jetty 9 is the only stable and supported version of Jetty now.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to