Skip to content

Commit

Permalink
[SPARK-45540][BUILD] Upgrade jetty to 9.4.53.v20231009
Browse files Browse the repository at this point in the history
### What changes were proposed in this pull request?
This pr aims to upgrade jetty from 9.4.52.v20230823 to 9.4.53.v20231009

### Why are the changes needed?
This version fix 2 CVE:

- [CVE-2023-36478](GHSA-wgh7-54f2-x98r) | https://github.com/apache/spark/security/dependabot/77
- [CVE-2023-44487](GHSA-qppj-fm5r-hxr3)

the full release notes as follows:
- https://github.com/jetty/jetty.project/releases/tag/jetty-9.4.53.v20231009

### Does this PR introduce _any_ user-facing change?
No

### How was this patch tested?
- Pass GitHub Actions

### Was this patch authored or co-authored using generative AI tooling?
No

Closes #43375 from LuciferYang/SPARK-45540.

Lead-authored-by: yangjie01 <yangjie01@baidu.com>
Co-authored-by: YangJie <yangjie01@baidu.com>
Signed-off-by: yangjie01 <yangjie01@baidu.com>
  • Loading branch information
LuciferYang committed Oct 16, 2023
1 parent 62653b9 commit 86001c1
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions dev/deps/spark-deps-hadoop-3-hive-2.3
Original file line number Diff line number Diff line change
Expand Up @@ -129,8 +129,8 @@ jersey-container-servlet/2.40//jersey-container-servlet-2.40.jar
jersey-hk2/2.40//jersey-hk2-2.40.jar
jersey-server/2.40//jersey-server-2.40.jar
jettison/1.5.4//jettison-1.5.4.jar
jetty-util-ajax/9.4.52.v20230823//jetty-util-ajax-9.4.52.v20230823.jar
jetty-util/9.4.52.v20230823//jetty-util-9.4.52.v20230823.jar
jetty-util-ajax/9.4.53.v20231009//jetty-util-ajax-9.4.53.v20231009.jar
jetty-util/9.4.53.v20231009//jetty-util-9.4.53.v20231009.jar
jline/2.14.6//jline-2.14.6.jar
jline/3.22.0//jline-3.22.0.jar
jna/5.13.0//jna-5.13.0.jar
Expand Down
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -143,7 +143,7 @@
<parquet.version>1.13.1</parquet.version>
<orc.version>1.9.1</orc.version>
<orc.classifier>shaded-protobuf</orc.classifier>
<jetty.version>9.4.52.v20230823</jetty.version>
<jetty.version>9.4.53.v20231009</jetty.version>
<jakartaservlet.version>4.0.3</jakartaservlet.version>
<chill.version>0.10.0</chill.version>
<!--
Expand Down

0 comments on commit 86001c1

Please sign in to comment.