Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-16676

Backport HADOOP-16152 to branch-3.2

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 3.2.1
    • 3.2.2
    • common
    • None

    Description

      Hello,

       

      org.apache.hadoop:hadoop-common define the dependency to jetty-webapp and jetty-xml in version v9.3.24 with known CVE-2017-9735. Please can you upgrade to version 9.4.7 or higher?

      +--- org.apache.hadoop:hadoop-client:3.2.1

      +--- org.apache.hadoop:hadoop-common:3.2.1
      +--- org.eclipse.jetty:jetty-webapp:9.3.24.v20180605
          +--- org.eclipse.jetty:jetty-xml:9.3.24.v20180605
          --- org.eclipse.jetty:jetty-servlet:9.3.24.v20180605

      Attachments

        1. HADOOP-16676.branch-3.2.002.patch
          14 kB
          Siyao Meng
        2. HADOOP-16676.branch-3.2.001.patch
          24 kB
          Siyao Meng
        3. HADOOP-16676.branch-3.2.001.patch
          15 kB
          Siyao Meng

        Issue Links

          breaks

          Bug - A problem which impairs or prevents the functions of the product. HBASE-26253 Backport HBASE-23834 to branch 2.3

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. BIGTOP-3486 Fix version mismatch of Jetty between Hadoop and HBase

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-16152 Upgrade Eclipse Jetty version to 9.4.x

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              smeng Siyao Meng
              dawinter DW
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: