Description
Hello,
org.apache.hadoop:hadoop-common define the dependency to jetty-webapp and jetty-xml in version v9.3.24 with known CVE-2017-9735. Please can you upgrade to version 9.4.7 or higher?
+--- org.apache.hadoop:hadoop-client:3.2.1
+--- org.apache.hadoop:hadoop-common:3.2.1 | ||
+--- org.eclipse.jetty:jetty-webapp:9.3.24.v20180605 | ||
+--- org.eclipse.jetty:jetty-xml:9.3.24.v20180605 | ||
--- org.eclipse.jetty:jetty-servlet:9.3.24.v20180605 |
Attachments
Attachments
Issue Links
- breaks
-
HBASE-26253 Backport HBASE-23834 to branch 2.3
- Resolved
- relates to
-
BIGTOP-3486 Fix version mismatch of Jetty between Hadoop and HBase
- Resolved
-
HADOOP-16152 Upgrade Eclipse Jetty version to 9.4.x
- Resolved