[ https://issues.apache.org/jira/browse/SLIDER-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15296834#comment-15296834 ]
Steve Loughran commented on SLIDER-1129: ---------------------------------------- There's a little bit of fun here at test time. If you bump up the httpclient version in slider, but run against a pre-hadoop-2.8 version of Hadoop, then the AM fails {code} ent="text/html; charset=ISO-8859-1"/> <title>Error 500 INTERNAL_SERVER_ERROR</title> </head> <body><h2>HTTP ERROR 500</h2> <p>Problem accessing /proxy/application_1464028321205_0001/. Reason: <pre> INTERNAL_SERVER_ERROR</pre></p><h3>Caused by:</h3><pre>java.lang.NullPointerException at org.apache.http.client.utils.URLEncodedUtils.parse(URLEncodedUtils.java:235) at org.apache.hadoop.security.token.delegation.web.ServletUtils.getParameter(ServletUtils.java:48) at org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationHandler.managementOperation(DelegationTokenAuthenticationHandler.java:171) at org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:514) at org.apache.hadoop.yarn.server.security.http.RMAuthenticationFilter.doFilter(RMAuthenticationFilter.java:82) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212) at org.apache.hadoop.http.HttpServer2$QuotingInputFilter.doFilter(HttpServer2.java:1243) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212) at org.apache.hadoop.http.NoCacheFilter.doFilter(NoCacheFilter.java:45) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212) at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399) at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216) at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182) at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766) at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450) at org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:230) at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152) at org.mortbay.jetty.Server.handle(Server.java:326) at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542) at org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:928) at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:549) at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212) at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404) at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410) at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582) </pre> <hr /><i><small>Powered by Jetty://</small></i><br/> <br/> <br/> <br/> <br/> <br/> <br/> {code} > update apache httpclient version to 4.5.2; httpcore to 4.4.4 > ------------------------------------------------------------ > > Key: SLIDER-1129 > URL: https://issues.apache.org/jira/browse/SLIDER-1129 > Project: Slider > Issue Type: Improvement > Components: build > Affects Versions: Slider 0.90.2 > Reporter: Steve Loughran > Assignee: Steve Loughran > Original Estimate: 1h > Remaining Estimate: 1h > > We need to update the Http Client libraries, to address a couple of CVEs. > apache httpclient => 4.5.2 > httpcore => 4.4.4 > We've done this for Hadoop in HADOOP-12767; this will be the same. > # increment the versions > # identify where minor version incompatibilities surface. (static code review) > # test -- This message was sent by Atlassian JIRA (v6.3.4#6332)