You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spark.apache.org by sa...@apache.org on 2021/04/24 10:23:00 UTC

[spark] branch master updated: [SPARK-35210][BUILD] Upgrade Jetty to 9.4.40 to fix ERR_CONNECTION_RESET issue

This is an automated email from the ASF dual-hosted git repository.

sarutak pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/spark.git


The following commit(s) were added to refs/heads/master by this push:
     new 44c1387  [SPARK-35210][BUILD] Upgrade Jetty to 9.4.40 to fix ERR_CONNECTION_RESET issue
44c1387 is described below

commit 44c13871d1f36a3fcf99bcd65aa17aa77e833eb6
Author: Kousuke Saruta <sa...@oss.nttdata.com>
AuthorDate: Sat Apr 24 19:22:32 2021 +0900

    [SPARK-35210][BUILD] Upgrade Jetty to 9.4.40 to fix ERR_CONNECTION_RESET issue
    
    ### What changes were proposed in this pull request?
    
    This PR proposes to upgrade Jetty to 9.4.40.
    
    ### Why are the changes needed?
    
    SPARK-34988 (#32091) upgraded Jetty to 9.4.39 for CVE-2021-28165.
    But after the upgrade, Jetty 9.4.40 was released to fix the ERR_CONNECTION_RESET issue (https://github.com/eclipse/jetty.project/issues/6152).
    This issue seems to affect Jetty 9.4.39 when POST method is used with SSL.
    For Spark, job submission using REST and ThriftServer with HTTPS protocol can be affected.
    
    ### Does this PR introduce _any_ user-facing change?
    
    No. No released version uses Jetty 9.3.39.
    
    ### How was this patch tested?
    
    CI.
    
    Closes #32318 from sarutak/upgrade-jetty-9.4.40.
    
    Authored-by: Kousuke Saruta <sa...@oss.nttdata.com>
    Signed-off-by: Kousuke Saruta <sa...@oss.nttdata.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 22d794c..92f1d91 100644
--- a/pom.xml
+++ b/pom.xml
@@ -138,7 +138,7 @@
     <derby.version>10.14.2.0</derby.version>
     <parquet.version>1.12.0</parquet.version>
     <orc.version>1.6.7</orc.version>
-    <jetty.version>9.4.39.v20210325</jetty.version>
+    <jetty.version>9.4.40.v20210413</jetty.version>
     <jakartaservlet.version>4.0.3</jakartaservlet.version>
     <chill.version>0.9.5</chill.version>
     <ivy.version>2.4.0</ivy.version>

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org
For additional commands, e-mail: commits-help@spark.apache.org