[
https://issues.apache.org/jira/browse/FLUME-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15575171#comment-15575171
]
Tristan Stevens commented on FLUME-2698:
----------------------------------------
Further issues: It seems that the Avro-IPC package includes Jetty 6 and the
Thrift dependency includes httpcore 4.1.3.
As such, this is probably less trivial than it initially looks and may need
upstream changes to Avro-IPC before we can proceed.
Lastly, Jetty 9.3/9.4 (9.4 is latest) requires JDK8 and we're only using JDK7.
> Upgrade Jetty Version
> ---------------------
>
> Key: FLUME-2698
> URL: https://issues.apache.org/jira/browse/FLUME-2698
> Project: Flume
> Issue Type: Bug
> Components: Web
> Affects Versions: v1.6.0, v1.5.1, v1.7.0
> Reporter: Joakim Erdfelt
>
> Flume depends on Jetty 6
> {code:xml}
> <dependency>
> <groupId>org.mortbay.jetty</groupId>
> <artifactId>jetty-util</artifactId>
> <version>6.1.26</version>
> </dependency>
> {code}
> Which was EOL (End of Life) back in 2010 and is no longer fit for production
> use (without heavy customizations and modifications like Google does for GAE,
> just to keep it safe and vulnerability free)
> Jetty was moved to Eclipse.org back during the Jetty 7 days.
> http://eclipse.org/jetty/
> Note that [Jetty 7 and Jetty 8 are now also
> EOL|https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00069.html] (as
> of 2014)
> Jetty 9 is the only stable and supported version of Jetty now.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
