Details
Description
CVE-2022-2047 and CVE-2022-2048 is recently found for Eclipse Jetty, and impacts 9.4.0 thru 9.4.46.
In latest 3.3.3 of hadoop-client-runtime, it shaded 9.4.43.v20210629 version jetty which is impacted.
In Trunk, Jetty is in version 9.4.44.v20210927, which is still impacted.
Need to upgrade Jetty Version.
Attachments
Issue Links
- is duplicated by
-
HADOOP-18343 upgrade to jetty 9.4.48 due to CVE
- Resolved
- links to