Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-35210

Upgrade Jetty to 9.4.40 to fix ERR_CONNECTION_RESET issue

Log workAgile BoardRank to TopRank to BottomAttach filesAttach ScreenshotVotersStop watchingWatchersCreate sub-taskConvert to sub-taskLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 2.4.7, 3.0.2, 3.1.1, 3.2.0
    • Fix Version/s: 3.0.3, 3.1.2, 3.2.0
    • Component/s: Build
    • Labels:
      None

      Description

      SPARK-34988 upgraded Jetty to 9.4.39 for CVE-2021-28165.
      But after the upgrade, Jetty 9.4.40 was released to fix the ERR_CONNECTION_RESET issue (https://github.com/eclipse/jetty.project/issues/6152).
      This issue seems to affect Jetty 9.4.39 when POST method is used with SSL.
      For Spark, job submission using REST and ThriftServer with HTTPS protocol can be affected.

        Attachments

          Activity

          $i18n.getText('security.level.explanation', $currentSelection) Viewable by All Users
          Cancel

            People

            • Assignee:
              sarutak Kousuke Saruta Assign to me
              Reporter:
              sarutak Kousuke Saruta

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment