>From Hussain Towaileb <[email protected]>:
Hussain Towaileb has uploaded this change for review. (
https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/17507 )
Change subject: Remove jetty dependency from external data module
......................................................................
Remove jetty dependency from external data module
Change-Id: Ie48f144f1fd3192e638c20362f24f4f1ac431948
---
M asterixdb/asterix-external-data/pom.xml
M asterixdb/pom.xml
2 files changed, 9 insertions(+), 23 deletions(-)
git pull ssh://asterix-gerrit.ics.uci.edu:29418/asterixdb
refs/changes/07/17507/1
diff --git a/asterixdb/asterix-external-data/pom.xml
b/asterixdb/asterix-external-data/pom.xml
index 4c2374a..b8cdcf1 100644
--- a/asterixdb/asterix-external-data/pom.xml
+++ b/asterixdb/asterix-external-data/pom.xml
@@ -540,16 +540,6 @@
<groupId>io.netty</groupId>
<artifactId>netty-transport-native-unix-common</artifactId>
</dependency>
- <!-- TODO(htowaileb): removed from hadoop transitively and added
separately to avoid CVEs, can
- be removed once upgraded to hadoop 3.3.4 as it addresses the CVEs -->
- <dependency>
- <groupId>org.eclipse.jetty</groupId>
- <artifactId>jetty-util</artifactId>
- </dependency>
- <dependency>
- <groupId>org.eclipse.jetty</groupId>
- <artifactId>jetty-util-ajax</artifactId>
- </dependency>
</dependencies>
<!-- apply patch for HADOOP-17225 to workaround CVE-2019-10172 -->
<repositories>
diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml
index a6d6342..1b17181 100644
--- a/asterixdb/pom.xml
+++ b/asterixdb/pom.xml
@@ -1996,19 +1996,6 @@
</exclusions>
</dependency>
<!-- Hadoop GCS end -->
-
- <!-- TODO(htowaileb): removed from hadoop transitively and added
separately to avoid CVEs, can
- be removed once upgraded to hadoop 3.3.4 as it addresses the CVEs
-->
- <dependency>
- <groupId>org.eclipse.jetty</groupId>
- <artifactId>jetty-util</artifactId>
- <version>9.4.48.v20220622</version>
- </dependency>
- <dependency>
- <groupId>org.eclipse.jetty</groupId>
- <artifactId>jetty-util-ajax</artifactId>
- <version>9.4.48.v20220622</version>
- </dependency>
</dependencies>
</dependencyManagement>
--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/17507
To unsubscribe, or for help writing mail filters, visit
https://asterix-gerrit.ics.uci.edu/settings
Gerrit-Project: asterixdb
Gerrit-Branch: master
Gerrit-Change-Id: Ie48f144f1fd3192e638c20362f24f4f1ac431948
Gerrit-Change-Number: 17507
Gerrit-PatchSet: 1
Gerrit-Owner: Hussain Towaileb <[email protected]>
Gerrit-MessageType: newchange
