You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Jose Luis López (Jira)" <ji...@apache.org> on 2026/10/04 09:23:00 UTC

[jira] [Commented] (HADOOP-19912) Upgrade to Jetty 12

    [ https://issues.apache.org/jira/browse/HADOOP-19912?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18123095#comment-18123095 ] 

Jose Luis López commented on HADOOP-19912:
------------------------------------------

Made some progress here: https://issues.apache.org/jira/browse/HADOOP-19970 to set a single version of Jetty for HADOOP and here https://issues.apache.org/jira/browse/HADOOP-19972 to perform the migration to jetty12-ee8. 

Use this first step to adapt to jetty12 changes. You can find the list in the PR linked with HADOOP-19972. Some changes bring configuration keys and adaptations needed to maintain backwards compatibility as much as possible.

I have tested the migration to jetty12-ee8 in small cluster, federated and HA cases. It looks good but more testing is needed. 

The change of coordinates to jakarta instead of javax proposed in 19395 needs to be postponed until the jetty12-ee8 is merged. From there, the change to jetty12-ee11 is also possible.

> Upgrade to Jetty 12
> -------------------
>
>                 Key: HADOOP-19912
>                 URL: https://issues.apache.org/jira/browse/HADOOP-19912
>             Project: Hadoop Common
>          Issue Type: Task
>            Reporter: PJ Fanning
>            Assignee: Jose Luis López
>            Priority: Major
>              Labels: pull-request-available
>
> See HADOOP-19910 - there is a CVE in Jetty but releases of 9.4 are rare and are 'sponsored' - Jetty 9.4 is not actively maintained. There are some commercial forks.
> Jetty 12 needs Java 17+.
> Will also force Jersey to upgraded to 3 or 4.
> And to replace many javax classes/jars with their jakarta equivalents.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org