Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HIVE-28697: upgrade Jetty to 9.4.56.v20240826 #5599

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

basapuram-kumar
Copy link

What changes were proposed in this pull request?

Upgrading Jetty to 9.4.56.v20240826 Due to CVE-2024-8184 ]

Why are the changes needed?

This suggested changes fixes the CVE-2024-8184 ]

Does this PR introduce any user-facing change?

No

Is the change a dependency upgrade?

No

How was this patch tested?

Adding the image for packaged jars.
Hive-jetty-libs

Copy link

sonarqubecloud bot commented Jan 7, 2025

@Aggarwal-Raghav
Copy link
Contributor

Aggarwal-Raghav commented Jan 8, 2025

@basapuram-kumar , upgrading jetty is not straight forward. I think there is some change in directory server. Go through this commnet #5044 (comment). If you have the bandwidth, maybe you can investigate it.

@basapuram-kumar
Copy link
Author

basapuram-kumar commented Jan 9, 2025

@Aggarwal-Raghav
Thanks for the review. As I see, as of now(As on 2.0.0.AM27 release ), no release of apache directory server has support for " 9.4.56.v20240826",.

But the master has this Jetty version support, hopefully we can expect in the next release of directory-server for this jetty-9.4.56 support.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants