[
https://issues.apache.org/jira/browse/TEZ-4114?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033314#comment-17033314
]
László Bodor commented on TEZ-4114:
-----------------------------------
after checking the unit test failures above I found that tez-dag doesn't need
jetty directly, so at the moment I cannot see any reason why jetty is included
into pom hierarchy...with [^TEZ-4114.04.patch] I'm trying to do an approach
where jetty is not included at all, only as test scoped dependency through
hadoop-common, hadoop-hdfs
it seems like, handling jetty's security issues (blackduck) can be taken care
of by simply removing it from the dependency tree, and let the hadoop provided
version be used
> Upgrade to Jetty 9.4
> --------------------
>
> Key: TEZ-4114
> URL: https://issues.apache.org/jira/browse/TEZ-4114
> Project: Apache Tez
> Issue Type: Bug
> Reporter: László Bodor
> Assignee: László Bodor
> Priority: Major
> Attachments: TEZ-4114.01.patch, TEZ-4114.02.patch, TEZ-4114.03.patch,
> TEZ-4114.04.patch
>
>
> Hadoop already did it in: https://issues.apache.org/jira/browse/HADOOP-16152
> Hive: "in progress", only abandoned jiras
> https://issues.apache.org/jira/browse/HIVE-21961
> https://issues.apache.org/jira/browse/HIVE-21211
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
