[jira] [Resolved] (FLUME-2698) Upgrade Jetty Version

["Denes Arvay (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLUME-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Denes Arvay resolved FLUME-2698.
--------------------------------
       Resolution: Fixed
    Fix Version/s: 1.9.0

Thank you [~tmgstev] and the reviewers for their comments, I have pushed this change to trunk.

> Upgrade Jetty Version
> ---------------------
>
>                 Key: FLUME-2698
>                 URL: https://issues.apache.org/jira/browse/FLUME-2698
>             Project: Flume
>          Issue Type: Bug
>          Components: Web
>    Affects Versions: 1.6.0, 1.5.1, 1.7.0
>            Reporter: Joakim Erdfelt
>            Assignee: Tristan Stevens
>              Labels: dependency
>             Fix For: 1.9.0
>
>         Attachments: HttpSourceLoadTest.jmx, jetty-6-http-test.csv, jetty-6-https-test.csv, jetty-9-http-test.csv, jetty-9-https-test.csv
>
>
> Flume depends on Jetty 6
> {code:xml}
>       <dependency>
>         <groupId>org.mortbay.jetty</groupId>
>         <artifactId>jetty-util</artifactId>
>         <version>6.1.26</version>
>       </dependency>
> {code}
> Which was EOL (End of Life) back in 2010 and is no longer fit for production use (without heavy customizations and modifications like Google does for GAE, just to keep it safe and vulnerability free)
> Jetty was moved to Eclipse.org back during the Jetty 7 days.
> http://eclipse.org/jetty/
> Note that [Jetty 7 and Jetty 8 are now also EOL|https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00069.html] (as of 2014)
> Jetty 9 is the only stable and supported version of Jetty now.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)