[HADOOP-17441] Update Jetty hadoop dependency

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 3.3.0, 3.2.1
• Component/s: build
• Assignee: Ravuri Sushma sree
• Reporter: Souryakanta Dwivedy
• Created: 21/Dec/20 11:12
• Updated: 04/Jan/21 19:41
• Resolved: 04/Jan/21 19:41

Description

Vulnerability fixes needed for Jetty hadoop dependency library

The jetty jars where CVEs are found are ,

================ =====

Jetty [version 9.4.20.v20190813 ]

jetty-server-9.4.20.v20190813.jar
CVE details :- [ CVE-2020-27216 ]
================ =====

Jetty-http [version 9.4.20.v20190813 ]

jetty-http-9.4.20.v20190813.jar
CVE details :- [ CVE-2020-27216 ]

Issue Links

• is duplicated by: HADOOP-17371 Bump Jetty to the latest version 9.4.35