Github-Mirror/seaweedfs
1
0
Fork 0
mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-09-10 00:20:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

security: upgrade Jetty from 9.4.53 to 12.0.16

Browse Source 
- Upgrade from 9.4.53.v20231009 to 12.0.16 (meets requirement >12.0.9)
- Addresses security vulnerabilities in older Jetty versions
- Externalized version to jetty.version property for easier maintenance
- Added jetty-util, jetty-io, jetty-security to dependencyManagement
- Ensures all Jetty transitive dependencies use secure version
This commit is contained in:
chrislu
2025-11-22 20:49:37 -08:00
parent a1a14259c3
commit e48bf9a791
1 changed files with 20 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/java/spark/pom.xml
+20 -4
View File
@@ -23,6 +23,7 @@
<seaweedfs.hadoop3.client.version>3.80</seaweedfs.hadoop3.client.version>
<jackson.version>2.15.3</jackson.version>
<netty.version>4.1.124.Final</netty.version>
<jetty.version>12.0.16</jetty.version>
<surefire.jvm.args>
-Xmx2g
-Dhadoop.home.dir=/tmp
@@ -150,21 +151,36 @@
<version>2.2</version>
</dependency>
<!-- Jetty - Fix CVEs -->
<!-- Jetty - Fix CVEs (upgraded to 12.x for security) -->
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-server</artifactId>
<version>9.4.53.v20231009</version>
<version>${jetty.version}</version>
</dependency>
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-http</artifactId>
<version>9.4.53.v20231009</version>
<version>${jetty.version}</version>
</dependency>
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-servlet</artifactId>
<version>9.4.53.v20231009</version>
<version>${jetty.version}</version>
</dependency>
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-util</artifactId>
<version>${jetty.version}</version>
</dependency>
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-io</artifactId>
<version>${jetty.version}</version>
</dependency>
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-security</artifactId>
<version>${jetty.version}</version>
</dependency>
</dependencies>
</dependencyManagement>