Skip to content

TEZ-4483 : [CVE-2017-20165, CVE-2017-20165] Upgrade debug to 2.6.9 to fix the vulnerability - #277

Merged
abstractdog merged 2 commits into
apache:masterfrom
amanraj2520:master_debugCVEFix
Apr 5, 2023
Merged

TEZ-4483 : [CVE-2017-20165, CVE-2017-20165] Upgrade debug to 2.6.9 to fix the vulnerability#277
abstractdog merged 2 commits into
apache:masterfrom
amanraj2520:master_debugCVEFix

Conversation

@amanraj2520

Copy link
Copy Markdown
Contributor

JIRA link : https://issues.apache.org/jira/browse/TEZ-4483. This PR addresses critical vulnerabilities [CVE-2017-20165, CVE-2017-20165]

@amanraj2520

Copy link
Copy Markdown
ContributorAuthor

@abstractdog@rbalamohan Can you please approve and merge this.

@tez-yetus

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeComment
+0 🆗reexec22m 57sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+1 💚@author0m 0sThe patch does not contain any @author tags.
_ master Compile Tests _
_ Patch Compile Tests _
+1 💚whitespace0m 0sThe patch has no whitespace issues.
_ Other Tests _
+1 💚asflicense0m 53sThe patch does not generate ASF License warnings.
24m 30s
SubsystemReport/Notes
DockerClientAPI=1.42 ServerAPI=1.42 base: https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-277/1/artifact/out/Dockerfile
GITHUB PR#277
Optional Testsdupname asflicense
unameLinux 649f469b6907 4.15.0-206-generic #217-Ubuntu SMP Fri Feb 3 19:10:13 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitypersonality/tez.sh
git revisionmaster / 25a9536
Max. process+thread count51 (vs. ulimit of 5500)
modulesC: tez-ui U: tez-ui
Console outputhttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-277/1/console
versionsgit=2.34.1 maven=3.6.3
Powered byApache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

@amanraj2520

Copy link
Copy Markdown
ContributorAuthor

@abstractdog@rbalamohan Can you please review this

@amanraj2520

Copy link
Copy Markdown
ContributorAuthor

Can some OSS committer please review this?

cc @abstractdog@rbalamohan

@abstractdog
abstractdog self-requested a review April 3, 2023 09:45
@abstractdog

Copy link
Copy Markdown
Contributor

tests passed, this LGTM

@amanraj2520

Copy link
Copy Markdown
ContributorAuthor

@abstractdog Can we please merge this

@abstractdog

Copy link
Copy Markdown
Contributor

this turned out to be conflicting due to TEZ-4484, can you please rebase @amanraj2520?

@amanraj2520

Copy link
Copy Markdown
ContributorAuthor

Sure @abstractdog will do

@amanraj2520

Copy link
Copy Markdown
ContributorAuthor

@abstractdog I have resolved the merge conflicts. Kindly merge this if it looks good.

@tez-yetus

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeComment
+0 🆗reexec0m 19sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+1 💚@author0m 0sThe patch does not contain any @author tags.
_ master Compile Tests _
-0 ⚠️patch0m 27sUsed diff version of patch file. Binary files and potentially other changes not applied. Please rebase and squash commits if necessary.
_ Patch Compile Tests _
+1 💚whitespace0m 0sThe patch has no whitespace issues.
_ Other Tests _
+1 💚asflicense0m 53sThe patch does not generate ASF License warnings.
1m 52s
SubsystemReport/Notes
DockerClientAPI=1.42 ServerAPI=1.42 base: https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-277/2/artifact/out/Dockerfile
GITHUB PR#277
Optional Testsdupname asflicense
unameLinux ace3304fc562 4.15.0-206-generic #217-Ubuntu SMP Fri Feb 3 19:10:13 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitypersonality/tez.sh
git revisionmaster / 6ca35c1
Max. process+thread count51 (vs. ulimit of 5500)
modulesC: tez-ui U: tez-ui
Console outputhttps://ci-hadoop.apache.org/job/tez-multibranch/job/PR-277/2/console
versionsgit=2.34.1 maven=3.6.3
Powered byApache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

@abstractdog
abstractdog self-requested a review April 5, 2023 09:16
@abstractdog
abstractdog merged commit 9a729cd into apache:masterApr 5, 2023
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@amanraj2520@tez-yetus@abstractdog