[jira] [Comment Edited] (CALCITE-5112) Upgrade Jetty version to 9.4.44.v202109272

["Julian Hyde (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CALCITE-5112?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17527885#comment-17527885 ] 

Julian Hyde edited comment on CALCITE-5112 at 4/26/22 4:52 AM:
---------------------------------------------------------------

I agree we should fix for 1.31.

Looks like there's a more recent Jetty version: 9.4.46.v20220331. Could we use that?


was (Author: julianhyde):
Looks like there's a more recent version: 9.4.46.v20220331. 

> Upgrade Jetty version to 9.4.44.v202109272
> ------------------------------------------
>
>                 Key: CALCITE-5112
>                 URL: https://issues.apache.org/jira/browse/CALCITE-5112
>             Project: Calcite
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 1.30.0
>            Reporter: xiong duan
>            Priority: Major
>             Fix For: 1.31.0
>
>
> Now The Calcite Jetty version is 9.4.15.v20190215.
> According to [JETTY-CPU-BUG|https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w] [Affected versions:7.2.2-9.4.38]. so we need to upgrade the jetty version.
> Why is 9.4.44.v202109272?
> According to the bug info, the bug has been fixed in this version and The Calcite has some module dependency on this.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)