spark-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Apache Spark (JIRA)" <>
Subject [jira] [Commented] (SPARK-14897) Upgrade Jetty to latest version of 8/9
Date Mon, 02 May 2016 18:35:12 GMT


Apache Spark commented on SPARK-14897:

User 'srowen' has created a pull request for this issue:

> Upgrade Jetty to latest version of 8/9
> --------------------------------------
>                 Key: SPARK-14897
>                 URL:
>             Project: Spark
>          Issue Type: Improvement
>            Reporter: Adam Kramer
>              Labels: web-ui
> It looks like the head/master branch of Spark uses quite an old version of Jetty: 8.1.14.v20131031
> There have been some announcement of security vulnerabilities, notably in 2015 and there
are versions of both 8 and 9 that address those. We recently left a web-ui port open and had
the server compromised within days. Albeit, this upgrade shouldn't be the only security improvement
made, the current version is clearly vulnerable, as-is.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message