This is an automated email from the ASF dual-hosted git repository. nitiraj pushed a commit to branch branch-2.7 in repository https://gitbox.apache.org/repos/asf/ambari.git
The following commit(s) were added to refs/heads/branch-2.7 by this push: new 7b1a3c8 AMBARI-24783 : removed dependencies which are having security issues (nitirajrathore) (#2492) 7b1a3c8 is described below commit 7b1a3c8a4df1bfbb0b85c210f3fa92f3d4de0ec2 Author: nitirajrathore <nitiraj.rath...@gmail.com> AuthorDate: Sun Oct 21 15:56:27 2018 +0530 AMBARI-24783 : removed dependencies which are having security issues (nitirajrathore) (#2492) * AMBARI-24783 : Cleanup dependencies in Capacity Scheduler (nitirajrathore) * AMBARI-24783 : removed dependencies which are having security issues (nitirajrathore) --- contrib/views/commons/pom.xml | 10 ++++++++++ contrib/views/files/pom.xml | 10 ++++++++++ contrib/views/pig/pom.xml | 34 ++++++++++++++++++++++------------ contrib/views/utils/pom.xml | 25 +++++++++++++++++++++---- contrib/views/wfmanager/pom.xml | 14 +++++++++++--- 5 files changed, 74 insertions(+), 19 deletions(-) diff --git a/contrib/views/commons/pom.xml b/contrib/views/commons/pom.xml index 6295ec5..ed676c3 100644 --- a/contrib/views/commons/pom.xml +++ b/contrib/views/commons/pom.xml @@ -53,6 +53,11 @@ <groupId>tomcat</groupId> <artifactId>jasper-runtime</artifactId> </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> </exclusions> </dependency> @@ -71,6 +76,11 @@ <groupId>tomcat</groupId> <artifactId>jasper-runtime</artifactId> </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> </exclusions> </dependency> diff --git a/contrib/views/files/pom.xml b/contrib/views/files/pom.xml index 1af37fa..4da8426 100644 --- a/contrib/views/files/pom.xml +++ b/contrib/views/files/pom.xml @@ -59,6 +59,11 @@ <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-core</artifactId> </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> </exclusions> </dependency> <dependency> @@ -74,6 +79,11 @@ <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-core</artifactId> </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> </exclusions> </dependency> <dependency> diff --git a/contrib/views/pig/pom.xml b/contrib/views/pig/pom.xml index a3ae58d..4730637 100644 --- a/contrib/views/pig/pom.xml +++ b/contrib/views/pig/pom.xml @@ -90,23 +90,33 @@ <groupId>org.apache.hadoop</groupId> <artifactId>hadoop-hdfs</artifactId> <version>${hadoop.version}</version> - <exclusions> - <exclusion> - <groupId>tomcat</groupId> - <artifactId>jasper-runtime</artifactId> - </exclusion> - </exclusions> + <exclusions> + <exclusion> + <groupId>tomcat</groupId> + <artifactId>jasper-runtime</artifactId> + </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> + </exclusions> </dependency> <dependency> <groupId>org.apache.hadoop</groupId> <artifactId>hadoop-common</artifactId> <version>${hadoop.version}</version> - <exclusions> - <exclusion> - <groupId>tomcat</groupId> - <artifactId>jasper-runtime</artifactId> - </exclusion> - </exclusions> + <exclusions> + <exclusion> + <groupId>tomcat</groupId> + <artifactId>jasper-runtime</artifactId> + </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> + </exclusions> </dependency> <dependency> <groupId>javax.ws.rs</groupId> diff --git a/contrib/views/utils/pom.xml b/contrib/views/utils/pom.xml index 7b88b20..d8c2f5e 100644 --- a/contrib/views/utils/pom.xml +++ b/contrib/views/utils/pom.xml @@ -60,6 +60,11 @@ <groupId>tomcat</groupId> <artifactId>jasper-runtime</artifactId> </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> </exclusions> </dependency> <dependency> @@ -67,10 +72,15 @@ <artifactId>hadoop-common</artifactId> <version>${hadoop.version}</version> <exclusions> - <exclusion> - <groupId>tomcat</groupId> - <artifactId>jasper-runtime</artifactId> - </exclusion> + <exclusion> + <groupId>tomcat</groupId> + <artifactId>jasper-runtime</artifactId> + </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> </exclusions> </dependency> <dependency> @@ -82,6 +92,13 @@ <groupId>org.apache.hadoop</groupId> <artifactId>hadoop-yarn-common</artifactId> <version>${hadoop.version}</version> + <exclusions> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> + </exclusions> </dependency> <dependency> <groupId>com.squareup.okhttp</groupId> diff --git a/contrib/views/wfmanager/pom.xml b/contrib/views/wfmanager/pom.xml index 1745f67..d932bb7 100644 --- a/contrib/views/wfmanager/pom.xml +++ b/contrib/views/wfmanager/pom.xml @@ -90,6 +90,11 @@ <groupId>tomcat</groupId> <artifactId>jasper-runtime</artifactId> </exclusion> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> </exclusions> </dependency> <dependency> @@ -101,10 +106,13 @@ <groupId>tomcat</groupId> <artifactId>jasper-runtime</artifactId> </exclusion> - </exclusions> + <!--removed for security bugs in version : 9.3.19.v20170502--> + <exclusion> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </exclusion> + </exclusions> </dependency> - - </dependencies> <properties> <uicode.dir>../</uicode.dir>