Uh oh!
There was an error while loading. Please reload this page.
[ZEPPELIN-3416] Bump up the version of xercesImpl to 2.11.0.SP5 - #2933
Closed
prabhjyotsingh wants to merge 2 commits into
Closed
[ZEPPELIN-3416] Bump up the version of xercesImpl to 2.11.0.SP5#2933prabhjyotsingh wants to merge 2 commits into
prabhjyotsingh wants to merge 2 commits into
Conversation
Change-Id: Ic6b87bad7a13db1bb0bc32478fe302c53818fa0e
| <artifactId>shiro-core</artifactId> | ||
| <version>${shiro.version}</version> | ||
| <exclusions> | ||
| <exclusion> |
ContributorAuthor
There was a problem hiding this comment.
This version of Shiro downloads BeanUtils-1.8.3 (this is a feature that we don't use). Also, this version of BeanUtils is marked with CVE-2014-0114, hence removing this for accidental usage.
| </repository> | ||
| <repository> | ||
| <id>hortonworks</id> | ||
| <url>http://repo.hortonworks.com/content/groups/public/</url> |
ContributorAuthor
There was a problem hiding this comment.
This version(2.11.0.SP5) of xercesImpl is not available in central repo, hence added this repo.
Member
There was a problem hiding this comment.
hmm... is it an "official" release?
ContributorAuthor
There was a problem hiding this comment.
Officially it is available here "https://repository.jboss.org/nexus/content/repositories/thirdparty-releases/", should I add that as well?
prabhjyotsingh
commented
Apr 19, 2018
ContributorAuthor
Change-Id: I6b429ee563efc5ef33713f87bc3045c4f5e45a3b
| <exclusions> | ||
| <exclusion> | ||
| <groupId>commons-beanutils</groupId> | ||
| <artifactId>commons-beanutils</artifactId> |
ContributorAuthor
There was a problem hiding this comment.
This version of Shiro downloads BeanUtils-1.8.3, which is marked with CVE-2014-0114. Hence, bumping up version of this as well.
felixcheung
approved these changes
Apr 21, 2018
| </repository> | ||
| <repository> | ||
| <id>hortonworks</id> | ||
| <url>http://repo.hortonworks.com/content/groups/public/</url> |
Member
There was a problem hiding this comment.
hmm... is it an "official" release?
prabhjyotsingh
commented
Apr 23, 2018
ContributorAuthor
Merging this if no more discussion. |
asfgit pushed a commit
that referenced
this pull request
Apr 24, 2018
Update xercesImpl to 2.11.0.SP5 to get some fixes. This is a required dependency for jdbc-phoenix. [ Improvement ] * [ZEPPELIN-3416](https://issues.apache.org/jira/browse/ZEPPELIN-3416) * Does the licenses files need update? N/A * Is there breaking changes for older versions? N/A * Does this needs documentation? N/A Author: Prabhjyot Singh <prabhjyotsingh@gmail.com> Closes#2933 from prabhjyotsingh/ZEPPELIN-3416 and squashes the following commits: 54677f1 [Prabhjyot Singh] bump version of beanutils to 1.9.2 8c891b6 [Prabhjyot Singh] ZEPPELIN-3416: Update xercesImpl to 2.11.0.SP5 Change-Id: I592b7e8dbf56144d65d5ba726d92f230d51b49ac (cherry picked from commit 322c868) Signed-off-by: Prabhjyot Singh <prabhjyotsingh@gmail.com>
prabhjyotsingh added a commit
to prabhjyotsingh/zeppelin
that referenced
this pull request
Jul 4, 2018
Update xercesImpl to 2.11.0.SP5 to get some fixes. This is a required dependency for jdbc-phoenix. [ Improvement ] * [ZEPPELIN-3416](https://issues.apache.org/jira/browse/ZEPPELIN-3416) * Does the licenses files need update? N/A * Is there breaking changes for older versions? N/A * Does this needs documentation? N/A Author: Prabhjyot Singh <prabhjyotsingh@gmail.com> Closesapache#2933 from prabhjyotsingh/ZEPPELIN-3416 and squashes the following commits: 54677f1 [Prabhjyot Singh] bump version of beanutils to 1.9.2 8c891b6 [Prabhjyot Singh] ZEPPELIN-3416: Update xercesImpl to 2.11.0.SP5 Change-Id: I592b7e8dbf56144d65d5ba726d92f230d51b49ac
mckartha pushed a commit
to syntechdev/zeppelin
that referenced
this pull request
Aug 9, 2018
Update xercesImpl to 2.11.0.SP5 to get some fixes. This is a required dependency for jdbc-phoenix. [ Improvement ] * [ZEPPELIN-3416](https://issues.apache.org/jira/browse/ZEPPELIN-3416) * Does the licenses files need update? N/A * Is there breaking changes for older versions? N/A * Does this needs documentation? N/A Author: Prabhjyot Singh <prabhjyotsingh@gmail.com> Closesapache#2933 from prabhjyotsingh/ZEPPELIN-3416 and squashes the following commits: 54677f1 [Prabhjyot Singh] bump version of beanutils to 1.9.2 8c891b6 [Prabhjyot Singh] ZEPPELIN-3416: Update xercesImpl to 2.11.0.SP5 Change-Id: I592b7e8dbf56144d65d5ba726d92f230d51b49ac
mckartha pushed a commit
to syntechdev/zeppelin
that referenced
this pull request
Aug 9, 2018
Update xercesImpl to 2.11.0.SP5 to get some fixes. This is a required dependency for jdbc-phoenix. [ Improvement ] * [ZEPPELIN-3416](https://issues.apache.org/jira/browse/ZEPPELIN-3416) * Does the licenses files need update? N/A * Is there breaking changes for older versions? N/A * Does this needs documentation? N/A Author: Prabhjyot Singh <prabhjyotsingh@gmail.com> Closesapache#2933 from prabhjyotsingh/ZEPPELIN-3416 and squashes the following commits: 54677f1 [Prabhjyot Singh] bump version of beanutils to 1.9.2 8c891b6 [Prabhjyot Singh] ZEPPELIN-3416: Update xercesImpl to 2.11.0.SP5 Change-Id: I592b7e8dbf56144d65d5ba726d92f230d51b49ac (cherry picked from commit 322c868) Signed-off-by: Prabhjyot Singh <prabhjyotsingh@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What is this PR for?
Update xercesImpl to 2.11.0.SP5 to get some fixes. This is a required dependency for jdbc-phoenix.
What type of PR is it?
[ Improvement ]
What is the Jira issue?
Questions: