Skip to content

TEZ-4469: Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693 - #271

Merged
abstractdog merged 1 commit into
apache:masterfrom
BilwaST:jettison-upgrade
Feb 24, 2023
Merged

TEZ-4469: Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693#271
abstractdog merged 1 commit into
apache:masterfrom
BilwaST:jettison-upgrade

Conversation

@BilwaST

Copy link
Copy Markdown
Contributor

No description provided.

@tez-yetus

Copy link
Copy Markdown

💔 -1 overall

VoteSubsystemRuntimeComment
+0 🆗reexec22m 44sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+1 💚@author0m 0sThe patch does not contain any @author tags.
-1 ❌test4tests0m 0sThe patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
_ master Compile Tests _
+0 🆗mvndep6m 37sMaven dependency ordering for branch
+1 💚mvninstall9m 46smaster passed
+1 💚compile2m 50smaster passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚compile2m 41smaster passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+1 💚checkstyle1m 39smaster passed
+1 💚javadoc2m 51smaster passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚javadoc2m 18smaster passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+0 🆗spotbugs5m 43sUsed deprecated FindBugs config; considering switching to SpotBugs.
+1 💚findbugs7m 14smaster passed
_ Patch Compile Tests _
+0 🆗mvndep0m 16sMaven dependency ordering for patch
+1 💚mvninstall4m 16sthe patch passed
+1 💚compile2m 52sthe patch passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚javac2m 52sthe patch passed
+1 💚compile2m 41sthe patch passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+1 💚javac2m 41sthe patch passed
+1 💚checkstyle1m 23sthe patch passed
+1 💚whitespace0m 0sThe patch has no whitespace issues.
+1 💚xml0m 2sThe patch has no ill-formed XML file.
+1 💚javadoc2m 39sthe patch passed with JDK Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04
+1 💚javadoc2m 21sthe patch passed with JDK Private Build-1.8.0_352-8u352-ga-1~22.04-b08
+1 💚findbugs7m 9sthe patch passed
_ Other Tests _
+1 💚unit5m 34stez-dag in the patch passed.
+1 💚unit74m 29sroot in the patch passed.
+1 💚asflicense1m 3sThe patch does not generate ASF License warnings.
165m 43s
SubsystemReport/Notes
DockerClientAPI=1.42 ServerAPI=1.42 base: https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-271/1/artifact/out/Dockerfile
GITHUB PR#271
Optional Testsdupname asflicense javac javadoc unit xml compile spotbugs findbugs checkstyle
unameLinux 5951b3246ea9 4.15.0-200-generic #211-Ubuntu SMP Thu Nov 24 18:16:04 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitypersonality/tez.sh
git revisionmaster / be99489
Default JavaPrivate Build-1.8.0_352-8u352-ga-1~22.04-b08
Multi-JDK versions/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.17+8-post-Ubuntu-1ubuntu222.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_352-8u352-ga-1~22.04-b08
Test Resultshttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-271/1/testReport/
Max. process+thread count2100 (vs. ulimit of 5500)
modulesC: tez-dag . U: .
Console outputhttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-271/1/console
versionsgit=2.34.1 maven=3.6.3 findbugs=3.0.1
Powered byApache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

@BilwaST

Copy link
Copy Markdown
ContributorAuthor

@abstractdog can you please review this PR? Thank you

@abstractdog
abstractdog self-requested a review February 24, 2023 12:24

@abstractdogabstractdog left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1, pending github action steps

@abstractdogabstractdog changed the title Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693TEZ-4469: Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693Feb 24, 2023
@abstractdog
abstractdog merged commit fa51a59 into apache:masterFeb 24, 2023
asfgit pushed a commit that referenced this pull request Feb 24, 2023
… (#271) (Bilwa S T reviewed by Laszlo Bodor)" - missing JIRA
This reverts commit fa51a59.
asfgit pushed a commit that referenced this pull request Feb 24, 2023
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@BilwaST@tez-yetus@abstractdog