You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@tez.apache.org by "Rohini Palaniswamy (JIRA)" <ji...@apache.org> on 2018/02/16 20:14:00 UTC

[jira] [Commented] (TEZ-3888) Update Jetty to org.eclipse.jetty 9.x

    [ https://issues.apache.org/jira/browse/TEZ-3888?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16367826#comment-16367826 ] 

Rohini Palaniswamy commented on TEZ-3888:
-----------------------------------------

Sorry missed this as the email notification went into Promotions instead of Inbox. https://issues.apache.org/jira/browse/PIG-5298 is actually removing jetty altogether from Pig. So it should be ok. Even otherwise it was only being used in some unit test code.

> Update Jetty to org.eclipse.jetty 9.x
> -------------------------------------
>
>                 Key: TEZ-3888
>                 URL: https://issues.apache.org/jira/browse/TEZ-3888
>             Project: Apache Tez
>          Issue Type: Improvement
>            Reporter: Eric Wohlstadter
>            Priority: Major
>         Attachments: TEZ-3888.1.patch
>
>
> mortbay Jetty 6 is no longer supported and has multiple CVEs.
> Tez can't be used in scenarios where compliance against vulnerability scanning tools is required.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)