[SPARK-34449] Upgrade Jetty to fix CVE-2020-27218

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.7, 3.0.1, 3.1.1, 3.2.0
• Fix Version/s: 2.4.8, 3.0.3, 3.1.1
• Component/s: Build
• Assignee: Kousuke Saruta
• Reporter: Kousuke Saruta
• Created: 17/Feb/21 03:22
• Updated: 12/Dec/22 18:10
• Resolved: 20/Feb/21 03:43

Description

CVE-2020-27218 affects the currently used Jetty 9.4.34 so let's upgrade it.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27218.

Issue Links

• links to: [Github] Pull Request #31574 (sarutak)
• links to: [Github] Pull Request #31574 (sarutak)
• links to: [Github] Pull Request #31583 (sarutak)