Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Jetty to 9.4.42.v20210604 #10907

Merged
merged 1 commit into from Jun 11, 2021

Conversation

lhotari
Copy link
Member

@lhotari lhotari commented Jun 11, 2021

Fixes #10906

Motivation

See #10906 . pulsar-admin is unstable over TLS connection because of Jetty bug in SSL buffering introduced in Jetty 9.4.39 .

Upgrading Jetty also addresses CVE-2021-28169 .

Modifications

Upgrade Jetty to 9.4.42.v20210604

@lhotari lhotari self-assigned this Jun 11, 2021
@lhotari lhotari added type/bug The PR fixed a bug or issue reported a bug area/proxy and removed type/bug The PR fixed a bug or issue reported a bug labels Jun 11, 2021
@lhotari lhotari modified the milestones: 2.8.0, 2.9.0 Jun 11, 2021
Copy link
Contributor

@eolivelli eolivelli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@codelipenghui codelipenghui modified the milestones: 2.9.0, 2.8.0 Jun 11, 2021
@merlimat merlimat added the type/bug The PR fixed a bug or issue reported a bug label Jun 11, 2021
@merlimat merlimat merged commit 6c03154 into apache:master Jun 11, 2021
codelipenghui pushed a commit that referenced this pull request Jun 12, 2021
Fixes #10906

Also addresses CVE-2021-28169

(cherry picked from commit 6c03154)
lhotari added a commit that referenced this pull request Jun 14, 2021
Fixes #10906

Also addresses CVE-2021-28169

(cherry picked from commit 6c03154)
@lhotari lhotari added the cherry-picked/branch-2.7 Archived: 2.7 is end of life label Jun 14, 2021
eolivelli pushed a commit to datastax/pulsar that referenced this pull request Jun 14, 2021
Fixes apache#10906

Also addresses CVE-2021-28169

(cherry picked from commit 6c03154)
(cherry picked from commit 1916324)
yangl pushed a commit to yangl/pulsar that referenced this pull request Jun 23, 2021
bharanic-dev pushed a commit to bharanic-dev/pulsar that referenced this pull request Mar 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/proxy cherry-picked/branch-2.7 Archived: 2.7 is end of life release/2.7.3 type/bug The PR fixed a bug or issue reported a bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

pulsar-admin connection to Pulsar Proxy is unstable when TLS is enabled, function jar uploads fail
6 participants