Skip to content

[SPARK-29410][BUILD] Update commons-beanutils to 1.9.4 - #26069

Closed
peter-toth wants to merge 1 commit into
apache:masterfrom
peter-toth:SPARK-29410-update-commons-beanutils-to-1.9.4
Closed

[SPARK-29410][BUILD] Update commons-beanutils to 1.9.4#26069
peter-toth wants to merge 1 commit into
apache:masterfrom
peter-toth:SPARK-29410-update-commons-beanutils-to-1.9.4

Conversation

@peter-toth

@peter-tothpeter-toth commented Oct 9, 2019

Copy link
Copy Markdown
Contributor

What changes were proposed in this pull request?

This PR updates commons-beanutils to 1.9.4.

Why are the changes needed?

CVE fixed in 1.9.4: http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Existing UTs.

@peter-toth

Copy link
Copy Markdown
ContributorAuthor

retest this please

@srowensrowen left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks OK pending tests. Jenkins is down now though

@dongjoon-hyundongjoon-hyun changed the title [SPARK-29410] Update commons-beanutils to 1.9.4[SPARK-29410][BUILD] Update commons-beanutils to 1.9.4Oct 9, 2019
@wangyum

Copy link
Copy Markdown
Member

retest this please

@SparkQA

Copy link
Copy Markdown

Test build #111956 has finished for PR 26069 at commit 88cf197.

  • This patch passes all tests.
  • This patch merges cleanly.
  • This patch adds no public classes.

@srowen

srowen commented Oct 12, 2019

Copy link
Copy Markdown
Member

Merged to master and 2.4 after a manual back-port

srowen pushed a commit that referenced this pull request Oct 12, 2019
This PR updates commons-beanutils to 1.9.4.
CVE fixed in 1.9.4: http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt
No.
Existing UTs.
Closes#26069 from peter-toth/SPARK-29410-update-commons-beanutils-to-1.9.4.
Authored-by: Peter Toth <peter.toth@gmail.com>
Signed-off-by: Sean Owen <sean.owen@databricks.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@peter-toth@wangyum@SparkQA@srowen@dongjoon-hyun