Skip to content

TEZ-4469:Upgrade jettison to 1.5.3 to fix CVE-2022-40150 - #268

Closed
devaspatikrishnatri wants to merge 1 commit into
apache:masterfrom
devaspatikrishnatri:TEZ-4469
Closed

TEZ-4469:Upgrade jettison to 1.5.3 to fix CVE-2022-40150#268
devaspatikrishnatri wants to merge 1 commit into
apache:masterfrom
devaspatikrishnatri:TEZ-4469

Conversation

@devaspatikrishnatri

Copy link
Copy Markdown
Contributor

Upgrading Jettison version to 1.5.3 to fix CVEs

@devaspatikrishnatri

Copy link
Copy Markdown
ContributorAuthor

@abstractdog Please review this.I am unable to manually add reviewers.

@abstractdog
abstractdog self-requested a review February 14, 2023 12:32
@tez-yetus

Copy link
Copy Markdown

💔 -1 overall

VoteSubsystemRuntimeComment
+0 🆗reexec24m 47sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 1sNo case conflicting files found.
+1 💚@author0m 0sThe patch does not contain any @author tags.
-1 ❌test4tests0m 0sThe patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
_ master Compile Tests _
+0 🆗mvndep7m 38sMaven dependency ordering for branch
+1 💚mvninstall11m 8smaster passed
+1 💚compile2m 57smaster passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚compile2m 39smaster passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+1 💚checkstyle1m 31smaster passed
+1 💚javadoc2m 44smaster passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚javadoc2m 16smaster passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+0 🆗spotbugs6m 12sUsed deprecated FindBugs config; considering switching to SpotBugs.
+1 💚findbugs7m 44smaster passed
_ Patch Compile Tests _
+0 🆗mvndep0m 15sMaven dependency ordering for patch
+1 💚mvninstall4m 35sthe patch passed
+1 💚compile2m 57sthe patch passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚javac2m 57sthe patch passed
+1 💚compile2m 37sthe patch passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+1 💚javac2m 37sthe patch passed
-0 ⚠️checkstyle0m 29stez-dag: The patch generated 1 new + 58 unchanged - 0 fixed = 59 total (was 58)
-0 ⚠️checkstyle0m 46sroot: The patch generated 1 new + 58 unchanged - 0 fixed = 59 total (was 58)
+1 💚whitespace0m 0sThe patch has no whitespace issues.
+1 💚xml0m 1sThe patch has no ill-formed XML file.
+1 💚javadoc2m 35sthe patch passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚javadoc2m 13sthe patch passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+1 💚findbugs7m 44sthe patch passed
_ Other Tests _
-1 ❌unit5m 15stez-dag in the patch failed.
+1 💚unit71m 35sroot in the patch passed.
+1 💚asflicense0m 48sThe patch does not generate ASF License warnings.
167m 20s
SubsystemReport/Notes
DockerClientAPI=1.42 ServerAPI=1.42 base: https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-268/1/artifact/out/Dockerfile
GITHUB PR#268
JIRA IssueTEZ-4469
Optional Testsdupname asflicense javac javadoc unit xml compile spotbugs findbugs checkstyle
unameLinux 17b849675dfb 4.15.0-200-generic #211-Ubuntu SMP Thu Nov 24 18:16:04 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitypersonality/tez.sh
git revisionmaster / 97cc788
Default JavaPrivate Build-1.8.0_352-8u352-ga-1~22.04-b08
Multi-JDK versions/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_352-8u352-ga-1~22.04-b08
checkstylehttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-268/1/artifact/out/diff-checkstyle-tez-dag.txt
checkstylehttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-268/1/artifact/out/diff-checkstyle-root.txt
unithttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-268/1/artifact/out/patch-unit-tez-dag.txt
Test Resultshttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-268/1/testReport/
Max. process+thread count1383 (vs. ulimit of 5500)
modulesC: tez-dag . U: .
Console outputhttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-268/1/console
versionsgit=2.34.1 maven=3.6.3 findbugs=3.0.1
Powered byApache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

@abstractdog

Copy link
Copy Markdown
Contributor

handled in #271

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@devaspatikrishnatri@tez-yetus@abstractdog