Skip to content

TEZ-4409: Upgrade async-http-client to 2.12.3 to resolve CVE - #204

Merged
abstractdog merged 1 commit into
apache:masterfrom
dmmkr:TEZ-4409
May 29, 2022
Merged

TEZ-4409: Upgrade async-http-client to 2.12.3 to resolve CVE#204
abstractdog merged 1 commit into
apache:masterfrom
dmmkr:TEZ-4409

Conversation

@dmmkr

Copy link
Copy Markdown
Contributor

No description provided.

@tez-yetus

This comment was marked as outdated.

@abstractdog

Copy link
Copy Markdown
Contributor

thanks for reporting this @dmmkr! have you had the chance to take a look at precommit failures?

@dmmkr

dmmkr commented May 2, 2022

Copy link
Copy Markdown
ContributorAuthor

Looking at the compile report there is some issue cloning Teleborder/FileSaver.js in tez-ui compilation, I am not facing these errors locally. Can you re-run the precommit job.

@abstractdog

Copy link
Copy Markdown
Contributor

Looking at the compile report there is some issue cloning Teleborder/FileSaver.js in tez-ui compilation, I am not facing these errors locally. Can you re-run the precommit job.

this was solved in the meantime, only reproducible in precommit
you need to rebase your patch on master to make the precommit work

@tez-yetus

Copy link
Copy Markdown

💔 -1 overall

VoteSubsystemRuntimeComment
+0 🆗reexec0m 29sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 1sNo case conflicting files found.
+1 💚@author0m 0sThe patch does not contain any @author tags.
-1 ❌test4tests0m 0sThe patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
_ master Compile Tests _
+1 💚mvninstall15m 51smaster passed
+1 💚compile2m 31smaster passed with JDK Private Build-11.0.15+10-Ubuntu-0ubuntu0.20.04.1
+1 💚compile2m 22smaster passed with JDK Private Build-1.8.0_312-8u312-b07-0ubuntu1~20.04-b07
+1 💚javadoc2m 42smaster passed with JDK Private Build-11.0.15+10-Ubuntu-0ubuntu0.20.04.1
+1 💚javadoc1m 55smaster passed with JDK Private Build-1.8.0_312-8u312-b07-0ubuntu1~20.04-b07
_ Patch Compile Tests _
+1 💚mvninstall4m 10sthe patch passed
+1 💚compile2m 32sthe patch passed with JDK Private Build-11.0.15+10-Ubuntu-0ubuntu0.20.04.1
+1 💚javac2m 32sthe patch passed
+1 💚compile2m 23sthe patch passed with JDK Private Build-1.8.0_312-8u312-b07-0ubuntu1~20.04-b07
+1 💚javac2m 23sthe patch passed
+1 💚whitespace0m 0sThe patch has no whitespace issues.
+1 💚xml0m 1sThe patch has no ill-formed XML file.
+1 💚javadoc2m 20sthe patch passed with JDK Private Build-11.0.15+10-Ubuntu-0ubuntu0.20.04.1
+1 💚javadoc1m 54sthe patch passed with JDK Private Build-1.8.0_312-8u312-b07-0ubuntu1~20.04-b07
_ Other Tests _
+1 💚unit71m 52sroot in the patch passed.
+1 💚asflicense1m 0sThe patch does not generate ASF License warnings.
113m 12s
SubsystemReport/Notes
DockerClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-204/2/artifact/out/Dockerfile
GITHUB PR#204
JIRA IssueTEZ-4409
Optional Testsdupname asflicense javac javadoc unit xml compile
unameLinux 3707860a84ba 4.15.0-156-generic #163-Ubuntu SMP Thu Aug 19 23:31:58 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitypersonality/tez.sh
git revisionmaster / 75876fc
Default JavaPrivate Build-1.8.0_312-8u312-b07-0ubuntu1~20.04-b07
Multi-JDK versions/usr/lib/jvm/java-11-openjdk-amd64:Private Build-11.0.15+10-Ubuntu-0ubuntu0.20.04.1 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_312-8u312-b07-0ubuntu1~20.04-b07
Test Resultshttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-204/2/testReport/
Max. process+thread count1475 (vs. ulimit of 5500)
modulesC: . U: .
Console outputhttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-204/2/console
versionsgit=2.25.1 maven=3.6.3
Powered byApache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

@abstractdog
abstractdog self-requested a review May 29, 2022 17:07
@abstractdog
abstractdog merged commit 24a77c9 into apache:masterMay 29, 2022
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@dmmkr@tez-yetus@abstractdog