Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
1.15.0
Description
Is Drill using a version of jetty web server that's really old? The jar's suggest it's using jetty 9.1 that was built sometime in 2014?
-rw-r--r-- 1 veeranaranammalpuram staff 15988 Nov 20 2017 jetty-continuation-9.1.1.v20140108.jar -rw-r--r-- 1 veeranaranammalpuram staff 103288 Nov 20 2017 jetty-http-9.1.5.v20140505.jar -rw-r--r-- 1 veeranaranammalpuram staff 101519 Nov 20 2017 jetty-io-9.1.5.v20140505.jar -rw-r--r-- 1 veeranaranammalpuram staff 95906 Nov 20 2017 jetty-security-9.1.5.v20140505.jar -rw-r--r-- 1 veeranaranammalpuram staff 401593 Nov 20 2017 jetty-server-9.1.5.v20140505.jar -rw-r--r-- 1 veeranaranammalpuram staff 110992 Nov 20 2017 jetty-servlet-9.1.5.v20140505.jar -rw-r--r-- 1 veeranaranammalpuram staff 119215 Nov 20 2017 jetty-servlets-9.1.5.v20140505.jar -rw-r--r-- 1 veeranaranammalpuram staff 341683 Nov 20 2017 jetty-util-9.1.5.v20140505.jar -rw-r--r-- 1 veeranaranammalpuram staff 38707 Dec 21 15:42 jetty-util-ajax-9.3.19.v20170502.jar -rw-r--r-- 1 veeranaranammalpuram staff 111466 Nov 20 2017 jetty-webapp-9.1.1.v20140108.jar -rw-r--r-- 1 veeranaranammalpuram staff 41763 Nov 20 2017 jetty-xml-9.1.1.v20140108.jar
This version is shown as deprecated:
https://www.eclipse.org/jetty/documentation/current/what-jetty-version.html#d0e203
Opening this to upgrade jetty to the latest stable supported version.
Attachments
Issue Links
- incorporates
-
DRILL-7135 Upgrade to Jetty 9.4
- Resolved
- is a child of
-
DRILL-6540 Upgrade to HADOOP-3.0 libraries
- Closed
- is related to
-
DRILL-7162 <SECURITY ISSUE> Apache Drill uses 3rd Party with Highest CVEs
- Resolved
- requires
-
DRILL-7081 Upgrade GlassFish Jersey and Javax Servlet dependecies
- Resolved
- links to