chore(deps): Bump jetty from 12.0.29 to 12.0.32#27294
chore(deps): Bump jetty from 12.0.29 to 12.0.32#27294ShahimSharafudeen wants to merge 1 commit intoprestodb:masterfrom
Conversation
82c17c3 to
268cc5a
Compare
268cc5a to
5476aeb
Compare
5476aeb to
16441b4
Compare
|
@ShahimSharafudeen imported this issue as lakehouse/presto #27294 |
|
Assigning this issue to @faizdani because you are the default assignee for issue follow-up scheme |
|
@faizdani |
|
This PR depends on #27128. I will be able to open and merge the current PR only after the referenced PR is merged, so I am currently waiting for that merge to complete. |
|
Assigning this issue to @faizdani because you are the default assignee for issue follow-up scheme |
|
@faizdani |
|
Assigning this issue to @faizdani because you are the default assignee for issue follow-up scheme |
|
@faizdani |
Description
Upgrade jetty version from 12.0.29 to 12.0.32 to address CVE-2025-11143 and CVE-2026-1605.
[Draft] : This is a draft PR and it has a dependency on the Airlift change: prestodb/airlift#146.
Once the updated Airlift version is released(0.229), we will need to update this PR to use the Airlift version that includes the Jetty upgrade and remove the additionally added jetty-ee10-servlet dependency from this PR. This dependency was temporarily added in the absence of the Airlift change.
This PR depends on an OSS PR that needs to be merged first, since it uses Airlift 0.228 with additional code changes on the Presto side. : #27128
Motivation and Context
Impact
Test Plan
Contributor checklist
Release Notes
Please follow release notes guidelines and fill in the release notes below.