[jira] [Created] (HADOOP-14930) Upgrade Jetty to 9.4 version

Akira Ajisaka (JIRA)

2018-12-10 09:01:00 UTC

[ https://issues.apache.org/jira/browse/HADOOP-14930?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Akira Ajisaka reopened HADOOP-14930:
------------------------------------

Can we upgrade to 9.4.x in Hadoop 3.3.0 or later to fix CVE-2017-9735?

Post by Ted Yu (JIRA)
Upgrade Jetty to 9.4 version
----------------------------
Key: HADOOP-14930
URL: https://issues.apache.org/jira/browse/HADOOP-14930
Project: Hadoop Common
Issue Type: Improvement
Reporter: Ted Yu
Assignee: Bharat Viswanadham
Priority: Major
Attachments: HADOOP-14930.00.patch
Currently 9.3.19.v20170502 is used.
In hbase 2.0+, 9.4.6.v20170531 is used.
{code}
java.lang.NoSuchMethodError: org.eclipse.jetty.server.session.SessionHandler.getSessionManager()Lorg/eclipse/jetty/server/SessionManager;
at org.apache.hadoop.http.HttpServer2.initializeWebServer(HttpServer2.java:548)
at org.apache.hadoop.http.HttpServer2.<init>(HttpServer2.java:529)
at org.apache.hadoop.http.HttpServer2.<init>(HttpServer2.java:119)
at org.apache.hadoop.http.HttpServer2$Builder.build(HttpServer2.java:415)
at org.apache.hadoop.hdfs.server.namenode.NameNodeHttpServer.start(NameNodeHttpServer.java:157)
at org.apache.hadoop.hdfs.server.namenode.NameNode.startHttpServer(NameNode.java:887)
at org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:723)
at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:949)
at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:928)
at org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1637)
at org.apache.hadoop.hdfs.MiniDFSCluster.createNameNode(MiniDFSCluster.java:1277)
at org.apache.hadoop.hdfs.MiniDFSCluster.configureNameService(MiniDFSCluster.java:1046)
at org.apache.hadoop.hdfs.MiniDFSCluster.createNameNodesAndSetConf(MiniDFSCluster.java:921)
{code}
This issue is to upgrade Jetty to 9.4 version

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-***@hadoop.apache.org
For additional commands, e-mail: common-dev-***@hadoop.apache.org