-
Couldn't load subscription status.
- Fork 28.9k
[SPARK-35870][BUILD] Upgrade Jetty to 9.4.42 #33053
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1 (Pending CIs).
Yes, it's good to catch up the dependency for Apache Spark 3.2.0.
|
Kubernetes integration test unable to build dist. exiting with code: 1 |
|
Test build #140246 has finished for PR 33053 at commit
|
|
Merged to |
|
Hmmm .. @sarutak, I don't know why and how but seems like JDBC docker test is flaky after this commit (although the test passed in this PR ... huh?) https://github.com/apache/spark/runs/2910056787: Mind taking a look when you find some time? |
|
@HyukjinKwon Hmm, it's strange. Please let me investigate. |
|
@HyukjinKwon I run The root cause may be elsewhere. |
|
I found 5b4816c would be the root cause. |
What changes were proposed in this pull request?
This PR upgrades Jetty to
9.4.42.In the current master,
9.4.40is used.9.4.41and9.4.42include the following updates.https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.41.v20210516
https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.42.v20210604
Why are the changes needed?
Mainly for CVE-2021-28169.
https://nvd.nist.gov/vuln/detail/CVE-2021-28169
This CVE might little affect Spark, but just in case.
Does this PR introduce any user-facing change?
No.
How was this patch tested?
CI.