This is an automated email from the ASF dual-hosted git repository.
srowen pushed a commit to branch branch-3.5
in repository https://gitbox.apache.org/repos/asf/spark.git
The following commit(s) were added to refs/heads/branch-3.5 by this push:
new 950b2f29105 [SPARK-45042][BUILD][3.5] Upgrade jetty to 9.4.52.v20230823
950b2f29105 is described below
commit 950b2f29105cd66355eef10503a93d678087c79e
Author: panbingkun <pbk1...@gmail.com>
AuthorDate: Mon Sep 4 09:01:50 2023 -0500
[SPARK-45042][BUILD][3.5] Upgrade jetty to 9.4.52.v20230823
### What changes were proposed in this pull request?
The pr aims to Upgrade jetty from 9.4.51.v20230217 to 9.4.52.v20230823.
(Backport to Spark 3.5.0)
### Why are the changes needed?
- This is a release of the
https://github.com/eclipse/jetty.project/issues/7958 that was sponsored by a
[support contract from Webtide.com](mailto:saleswebtide.com)
- The newest version fix a possible security issue:
This release provides a workaround for Security Advisory
https://github.com/advisories/GHSA-58qw-p7qm-5rvh
- The release note as follows:
https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.52.v20230823
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
Pass GA.
### Was this patch authored or co-authored using generative AI tooling?
No.
Closes #42795 from panbingkun/branch-3.5_SPARK-45042.
Authored-by: panbingkun <pbk1...@gmail.com>
Signed-off-by: Sean Owen <sro...@gmail.com>
---
dev/deps/spark-deps-hadoop-3-hive-2.3 | 4 ++--
pom.xml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/dev/deps/spark-deps-hadoop-3-hive-2.3
b/dev/deps/spark-deps-hadoop-3-hive-2.3
index b6aba589d5f..1d02f8dba56 100644
--- a/dev/deps/spark-deps-hadoop-3-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-3-hive-2.3
@@ -130,8 +130,8 @@
jersey-container-servlet/2.40//jersey-container-servlet-2.40.jar
jersey-hk2/2.40//jersey-hk2-2.40.jar
jersey-server/2.40//jersey-server-2.40.jar
jettison/1.1//jettison-1.1.jar
-jetty-util-ajax/9.4.51.v20230217//jetty-util-ajax-9.4.51.v20230217.jar
-jetty-util/9.4.51.v20230217//jetty-util-9.4.51.v20230217.jar
+jetty-util-ajax/9.4.52.v20230823//jetty-util-ajax-9.4.52.v20230823.jar
+jetty-util/9.4.52.v20230823//jetty-util-9.4.52.v20230823.jar
jline/2.14.6//jline-2.14.6.jar
joda-time/2.12.5//joda-time-2.12.5.jar
jodd-core/3.5.2//jodd-core-3.5.2.jar
diff --git a/pom.xml b/pom.xml
index 154ca4005f6..8fc4b89a78c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -143,7 +143,7 @@
<parquet.version>1.13.1</parquet.version>
<orc.version>1.9.1</orc.version>
<orc.classifier>shaded-protobuf</orc.classifier>
- <jetty.version>9.4.51.v20230217</jetty.version>
+ <jetty.version>9.4.52.v20230823</jetty.version>
<jakartaservlet.version>4.0.3</jakartaservlet.version>
<chill.version>0.10.0</chill.version>
<!--
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@spark.apache.org
For additional commands, e-mail: commits-h...@spark.apache.org
