Skip to content

Conversation

@mehradpk
Copy link
Contributor

Description

Upgrade Jetty to 12.0.29 to resolve CVE-2025-5115

Impact

Test Plan

Contributor checklist

  • Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
  • PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
  • Documented new properties (with its default value), SQL syntax, functions, or other functionality.
  • If release notes are required, they follow the release notes guidelines.
  • Adequate tests were added if applicable.
  • CI passed.
  • If adding new dependencies, verified they have an OpenSSF Scorecard score of 5.0 or higher (or obtained explicit TSC approval for lower scores).

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

Security Changes
* Upgrade Jetty to 12.0.29 to resolve `CVE-2025-5115 <https://github.com/advisories/GHSA-mmxm-8w33-wc4h>`_.

@prestodb-ci prestodb-ci added the from:IBM PR from IBM label Nov 13, 2025
@mehradpk mehradpk changed the title Upgrade Jetty to 12.0.29 to resolve CVE-2025-5115 fix(security): Upgrade Jetty to 12.0.29 to resolve CVE-2025-5115 Nov 13, 2025
@mehradpk mehradpk force-pushed the jetty-upgrade-cve-fix branch from 3eef2ca to 0f833aa Compare November 19, 2025 07:35
@linux-foundation-easycla
Copy link

linux-foundation-easycla bot commented Nov 19, 2025

CLA Signed

The committers listed above are authorized under a signed CLA.

@mehradpk mehradpk force-pushed the jetty-upgrade-cve-fix branch 2 times, most recently from 00ef3e9 to 0727f16 Compare November 19, 2025 07:41
@mehradpk mehradpk force-pushed the jetty-upgrade-cve-fix branch from 0727f16 to 34586ef Compare November 19, 2025 07:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

from:IBM PR from IBM

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants