You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Steve Loughran (Jira)" <ji...@apache.org> on 2025/12/29 11:32:00 UTC
[jira] [Assigned] (HADOOP-19761) Upgrade jetty and http2-common to 9.4.58.v20250814 due to CVE-2025-5115
[ https://issues.apache.org/jira/browse/HADOOP-19761?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Steve Loughran reassigned HADOOP-19761:
---------------------------------------
Assignee: fuchaohong
> Upgrade jetty and http2-common to 9.4.58.v20250814 due to CVE-2025-5115
> -----------------------------------------------------------------------
>
> Key: HADOOP-19761
> URL: https://issues.apache.org/jira/browse/HADOOP-19761
> Project: Hadoop Common
> Issue Type: Improvement
> Components: build, yarn
> Affects Versions: 3.5.0
> Reporter: fuchaohong
> Assignee: fuchaohong
> Priority: Minor
> Labels: pull-request-available
> Fix For: 3.5.0
>
>
> Upgrade *http2-common* to version *9.4.58.v20250814* to address {*}CVE-2025-5115{*}, and upgrade *Jetty* to the same version simultaneously.
> CVE announcement: https://www.eclipse.org/lists/jetty-users/msg10928.html
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org