Skip to content
This repository was archived by the owner on Mar 24, 2025. It is now read-only.

OOZIE-3720 : Upgrade jetty to 9.4.53 due to CVE-2023-44487 #93

Open
AnmolSun wants to merge 2 commits into
base: master
Choose a base branch
from
Open

OOZIE-3720 : Upgrade jetty to 9.4.53 due to CVE-2023-44487 #93

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7ca4ce0
Upgrade jetty to 9.4.53 due to CVE-2023-44487
AnmolSun Jan 29, 2024
2286ff2
Update release-log.txt with OOZIE-3720
AnmolSun Jan 29, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,7 @@
<joda.time.version>2.9.9</joda.time.version>
<avro.version>1.8.2</avro.version>

<jetty.version>9.4.44.v20210927</jetty.version>
<jetty.version>9.4.53.v20231009</jetty.version>
<apache.jsp.version>8.0.33</apache.jsp.version>

<jline.version>0.9.94</jline.version>
Expand Down
1 change: 1 addition & 0 deletions release-log.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
-- Oozie 5.3.0 release (trunk - unreleased)

OOZIE-3720 Upgrade jetty to 9.4.53 due to CVE-2023-44487
OOZIE-3717 When fork actions parallel submit, becasue ForkedActionStartXCommand and ActionStartXCommand has the same name, so ForkedActionStartXCommand would be lost, and cause deadlock (chenhd via dionusos)
OOZIE-3715 Fix fork out more than one transitions submit , one transition submit fail can't execute KillXCommand (chenhd via dionusos)
OOZIE-3716 Invocation of Main class completed Message is skipped when LauncherSecurityManager calls system exit (khr9603 via dionusos)
Expand Down