[ 
https://issues.apache.org/jira/browse/TEZ-4083?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16959248#comment-16959248
 ] 

László Bodor commented on TEZ-4083:
-----------------------------------

TestTezCommonUtils fails while setting up MiniDFSCluster:
{code}
java.lang.NoClassDefFoundError: org/eclipse/jetty/http/HttpContent$Factory
        at 
org.apache.tez.common.TestTezCommonUtils.setup(TestTezCommonUtils.java:61)
Caused by: java.lang.ClassNotFoundException: 
org.eclipse.jetty.http.HttpContent$Factory
        at 
org.apache.tez.common.TestTezCommonUtils.setup(TestTezCommonUtils.java:61)
{code}
seems like this patch cannot enter without hadoop dependency upgrade


> Upgrade to latest 9.4.x Jetty version
> -------------------------------------
>
>                 Key: TEZ-4083
>                 URL: https://issues.apache.org/jira/browse/TEZ-4083
>             Project: Apache Tez
>          Issue Type: Improvement
>            Reporter: Daniel Velasquez
>            Assignee: László Bodor
>            Priority: Major
>         Attachments: TEZ-4083.01.patch
>
>
> Jetty 9.3.24.v20180605 has security vulnerabilities where the server is 
> vulnerable to XSS conditions.
> [https://www.cvedetails.com/cve/CVE-2019-10241/]
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to