{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":23418517,"defaultBranch":"trunk","name":"hadoop","ownerLogin":"apache","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2014-08-28T07:00:08.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/47359?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1717829257.0","currentOid":""},"activityList":{"items":[{"before":"b69e7d1e2b64555c7175f1f5ab3f47f7248211dc","after":"5693cc69b8ad50e40744213deb5c0447443570e2","ref":"refs/heads/branch-3.4","pushedAt":"2024-06-11T20:26:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mukund-thakur","name":"Mukund Thakur","path":"/mukund-thakur","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/10720944?s=80&v=4"},"commit":{"message":"HADOOP-19196. Allow base path to be deleted as well using Bulk Delete. (#6872)\n\n\r\nContributed by: Mukund Thakur","shortMessageHtmlLink":"HADOOP-19196. Allow base path to be deleted as well using Bulk Delete. ("}},{"before":"20ee95921b5e438b89156ecbc254ff9b1bf1f8df","after":"343921930cc1456476bb7d0e8494a037e44eeebb","ref":"refs/heads/gh-pages","pushedAt":"2024-06-11T19:19:37.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 06dd3bfee8046c65fee51d627ca88a7e2530afe1","shortMessageHtmlLink":"deploy: 06dd3bf"}},{"before":"005030f7a0db90ac936e61f0e8f263283623e30e","after":"06dd3bfee8046c65fee51d627ca88a7e2530afe1","ref":"refs/heads/trunk","pushedAt":"2024-06-11T19:06:53.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mukund-thakur","name":"Mukund Thakur","path":"/mukund-thakur","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/10720944?s=80&v=4"},"commit":{"message":"HADOOP-19196. Allow base path to be deleted as well using Bulk Delete. (#6872)\n\n\r\nContributed by: Mukund Thakur","shortMessageHtmlLink":"HADOOP-19196. Allow base path to be deleted as well using Bulk Delete. ("}},{"before":"7b39ff5ee6e9ec8d0b7616f3e7615d08baf50862","after":"20ee95921b5e438b89156ecbc254ff9b1bf1f8df","ref":"refs/heads/gh-pages","pushedAt":"2024-06-11T18:19:03.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 005030f7a0db90ac936e61f0e8f263283623e30e","shortMessageHtmlLink":"deploy: 005030f"}},{"before":"5826b15fe6a8b2723b084e042b098c99cfca8edb","after":"b69e7d1e2b64555c7175f1f5ab3f47f7248211dc","ref":"refs/heads/branch-3.4","pushedAt":"2024-06-11T18:15:53.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mukund-thakur","name":"Mukund Thakur","path":"/mukund-thakur","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/10720944?s=80&v=4"},"commit":{"message":"HADOOP-19137. [ABFS] Prevent ABFS initialization for non-hierarchal-namespace account if Customer-provided-key configs given. (#6752) (#6880)\n\nCustomer-provided-keys (CPK) configs are not allowed with non-hierarchal-namespace (non-HNS) accounts for ABFS. This patch aims to prevent ABFS initialization for non-HNS accounts if CPK configs are provided.\r\n\r\nContributed by: Pranav Saxena","shortMessageHtmlLink":"HADOOP-19137. [ABFS] Prevent ABFS initialization for non-hierarchal-n…"}},{"before":"bb30545583c5c78199143d9cb9dd84cd3dfa8068","after":"005030f7a0db90ac936e61f0e8f263283623e30e","ref":"refs/heads/trunk","pushedAt":"2024-06-11T18:06:39.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mukund-thakur","name":"Mukund Thakur","path":"/mukund-thakur","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/10720944?s=80&v=4"},"commit":{"message":"HADOOP-18610: [ABFS] OAuth2 Token Provider support for Azure Workload Identity (#6787)\n\n\r\nAdd support for Azure Active Directory (Azure AD) workload identities which integrate with the Kubernetes's native capabilities to federate with any external identity provider.\r\n\r\nContributed By: Anuj Modi","shortMessageHtmlLink":"HADOOP-18610: [ABFS] OAuth2 Token Provider support for Azure Workload…"}},{"before":"587b82a566b7289250ecbc24cd601b83f8ac736c","after":"7b39ff5ee6e9ec8d0b7616f3e7615d08baf50862","ref":"refs/heads/gh-pages","pushedAt":"2024-06-11T16:21:44.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: bb30545583c5c78199143d9cb9dd84cd3dfa8068","shortMessageHtmlLink":"deploy: bb30545"}},{"before":"776c0a3ab9565efca22c17f41e53f27415f23b30","after":"bb30545583c5c78199143d9cb9dd84cd3dfa8068","ref":"refs/heads/trunk","pushedAt":"2024-06-11T16:10:00.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19163. Use hadoop-shaded-protobuf_3_25 (#6858)\n\n\r\nContributed by PJ Fanning","shortMessageHtmlLink":"HADOOP-19163. Use hadoop-shaded-protobuf_3_25 (#6858)"}},{"before":"0c3c9d199702488e9dc971107cb1e6796fe87a8c","after":"bd63358c0bb53bb1097f38ebf6c125547fe5e547","ref":"refs/heads/branch-3.3","pushedAt":"2024-06-11T12:09:23.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19116. Update to zookeeper client 3.8.4 due to CVE-2024-23944. (#6638)\n\n\r\nUpdated ZK client dependency to 3.8.4 to address CVE-2024-23944.\r\n\r\nContributed by PJ Fanning","shortMessageHtmlLink":"HADOOP-19116. Update to zookeeper client 3.8.4 due to CVE-2024-23944. ("}},{"before":"a087e0b639e8d0d7edb5249c65179a3ca85899cf","after":"587b82a566b7289250ecbc24cd601b83f8ac736c","ref":"refs/heads/gh-pages","pushedAt":"2024-06-11T07:38:22.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 776c0a3ab9565efca22c17f41e53f27415f23b30","shortMessageHtmlLink":"deploy: 776c0a3"}},{"before":"2e1deee87a5ecedbab09db1e546da733771aa11a","after":"776c0a3ab9565efca22c17f41e53f27415f23b30","ref":"refs/heads/trunk","pushedAt":"2024-06-11T07:26:21.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ZanderXu","name":"ZanderXu","path":"/ZanderXu","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17900637?s=80&v=4"},"commit":{"message":"HDFS-17539. Make TestFileChecksum fields static (#6853)","shortMessageHtmlLink":"HDFS-17539. Make TestFileChecksum fields static (#6853)"}},{"before":"1c233c02777ed96279a016d18959773d748465ca","after":"a087e0b639e8d0d7edb5249c65179a3ca85899cf","ref":"refs/heads/gh-pages","pushedAt":"2024-06-10T20:15:33.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 2e1deee87a5ecedbab09db1e546da733771aa11a","shortMessageHtmlLink":"deploy: 2e1deee"}},{"before":"10df59e4210206508da648d5676f1c7d423b0353","after":"2e1deee87a5ecedbab09db1e546da733771aa11a","ref":"refs/heads/trunk","pushedAt":"2024-06-10T20:03:41.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mukund-thakur","name":"Mukund Thakur","path":"/mukund-thakur","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/10720944?s=80&v=4"},"commit":{"message":"HADOOP-19137. [ABFS] Prevent ABFS initialization for non-hierarchal-namespace account if Customer-provided-key configs given. (#6752)\n\n\r\nCustomer-provided-keys (CPK) configs are not allowed with non-hierarchal-namespace (non-HNS) accounts for ABFS. This patch aims to prevent ABFS initialization for non-HNS accounts if CPK configs are provided.\r\n\r\nContributed by: Pranav Saxena","shortMessageHtmlLink":"HADOOP-19137. [ABFS] Prevent ABFS initialization for non-hierarchal-n…"}},{"before":"52e656f8a1db44011f4fb20981b60a2f3b1d9f97","after":"1c233c02777ed96279a016d18959773d748465ca","ref":"refs/heads/gh-pages","pushedAt":"2024-06-08T07:03:06.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 10df59e4210206508da648d5676f1c7d423b0353","shortMessageHtmlLink":"deploy: 10df59e"}},{"before":"01d257d5aa94163244cd3f1149d5ba2cb9f1e6ff","after":"10df59e4210206508da648d5676f1c7d423b0353","ref":"refs/heads/trunk","pushedAt":"2024-06-08T06:51:28.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"slfan1989","name":null,"path":"/slfan1989","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/55643692?s=80&v=4"},"commit":{"message":"Revert \"HADOOP-19071. Update maven-surefire-plugin from 3.0.0 to 3.2.5. (#6664)\" (#6875)\n\nThis reverts commit 88ad7db80de6f5e2d6185d5c397b32218d6c20ea.\r\nSigned-off-by: Shilun Fan ","shortMessageHtmlLink":"Revert \"HADOOP-19071. Update maven-surefire-plugin from 3.0.0 to 3.2.…"}},{"before":null,"after":"83cefeeb5e9db4e79be4d883a5a968e96712e148","ref":"refs/heads/revert-6664-HADOOP-19071-V3","pushedAt":"2024-06-08T06:47:37.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"slfan1989","name":null,"path":"/slfan1989","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/55643692?s=80&v=4"},"commit":{"message":"Revert \"HADOOP-19071. Update maven-surefire-plugin from 3.0.0 to 3.2.5. (#666…\"\n\nThis reverts commit 88ad7db80de6f5e2d6185d5c397b32218d6c20ea.","shortMessageHtmlLink":"Revert \"HADOOP-19071. Update maven-surefire-plugin from 3.0.0 to 3.2.…"}},{"before":"93c787be00de67d085d5731450c9f075ebcbadf5","after":"5826b15fe6a8b2723b084e042b098c99cfca8edb","ref":"refs/heads/branch-3.4","pushedAt":"2024-06-07T16:48:48.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19189. ITestS3ACommitterFactory failing (#6857)\n\n* parameterize the test run rather than do it from within the test suite.\n* log what the committer factory is up to (and improve its logging)\n* close all filesystems, then create the test filesystem with cache enabled.\n\nThe cache is critical, we want the fs from cache to be used when querying\nfilesystem properties, rather than one created from the committer jobconf,\nwhich will have the same options as the task committer, so not actually\nvalidate the override logic.\n\nContributed by Steve Loughran","shortMessageHtmlLink":"HADOOP-19189. ITestS3ACommitterFactory failing (#6857)"}},{"before":"cf4fbb479ce91e83aaf8baf178bae4dfc934a3cf","after":"52e656f8a1db44011f4fb20981b60a2f3b1d9f97","ref":"refs/heads/gh-pages","pushedAt":"2024-06-07T16:46:01.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 01d257d5aa94163244cd3f1149d5ba2cb9f1e6ff","shortMessageHtmlLink":"deploy: 01d257d"}},{"before":"5b1346fb888c6997dd8d79e72948a337e61ef685","after":"0c3c9d199702488e9dc971107cb1e6796fe87a8c","ref":"refs/heads/branch-3.3","pushedAt":"2024-06-07T16:34:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"asfgit","name":null,"path":"/asfgit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1341245?s=80&v=4"},"commit":{"message":"HADOOP-19178: [WASB Deprecation] Updating Documentation on Upcoming Plans for Hadoop-Azure (#6862)\n\nContributed by Anuj Modi","shortMessageHtmlLink":"HADOOP-19178: [WASB Deprecation] Updating Documentation on Upcoming P…"}},{"before":"bbb17e76a7a8a995a8b202c9b9530f39bb2a2957","after":"01d257d5aa94163244cd3f1149d5ba2cb9f1e6ff","ref":"refs/heads/trunk","pushedAt":"2024-06-07T16:34:01.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19189. ITestS3ACommitterFactory failing (#6857)\n\n\r\n* parameterize the test run rather than do it from within the test suite.\r\n* log what the committer factory is up to (and improve its logging)\r\n* close all filesystems, then create the test filesystem with cache enabled.\r\n\r\nThe cache is critical, we want the fs from cache to be used when querying\r\nfilesystem properties, rather than one created from the committer jobconf,\r\nwhich will have the same options as the task committer, so not actually\r\nvalidate the override logic.\r\n\r\nContributed by Steve Loughran","shortMessageHtmlLink":"HADOOP-19189. ITestS3ACommitterFactory failing (#6857)"}},{"before":"75704ed4e4e79b3bce33223f9e598aacb89e4a86","after":"cf4fbb479ce91e83aaf8baf178bae4dfc934a3cf","ref":"refs/heads/gh-pages","pushedAt":"2024-06-07T13:40:22.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: bbb17e76a7a8a995a8b202c9b9530f39bb2a2957","shortMessageHtmlLink":"deploy: bbb17e7"}},{"before":"59b29800bdce4bfe9b52ccf2d8bd6eeb0f35176e","after":"93c787be00de67d085d5731450c9f075ebcbadf5","ref":"refs/heads/branch-3.4","pushedAt":"2024-06-07T13:33:23.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-18516: [ABFS][Authentication] Support Fixed SAS Token for ABFS Authentication (#6552)\n\nContributed by Anuj Modi","shortMessageHtmlLink":"HADOOP-18516: [ABFS][Authentication] Support Fixed SAS Token for ABFS…"}},{"before":"f2e16c58695800a8444cceed6d6cea9ac5ca1599","after":"59b29800bdce4bfe9b52ccf2d8bd6eeb0f35176e","ref":"refs/heads/branch-3.4","pushedAt":"2024-06-07T13:32:27.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755) (#6866)\n\n\r\nAddresses\r\n\r\n* CVE-2024-29857 - Importing an EC certificate with specially crafted F2m parameters can cause high CPU usage during parameter evaluation.\r\n* CVE-2024-30171 - Possible timing based leakage in RSA based handshakes due to exception processing eliminated.\r\n* CVE-2024-30172 - Crafted signature and public key can be used to trigger an infinite loop in the Ed25519 verification code.\r\n* CVE-2024-301XX - When endpoint identification is enabled and an SSL socket is not created with an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address.\r\n\r\nContributed by PJ Fanning","shortMessageHtmlLink":"HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755) (#6866)"}},{"before":"935bc184fa21af3d3fde27b07ebac5a031725fc9","after":"f2e16c58695800a8444cceed6d6cea9ac5ca1599","ref":"refs/heads/branch-3.4","pushedAt":"2024-06-07T13:29:55.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19178: [WASB Deprecation] Updating Documentation on Upcoming Plans for Hadoop-Azure (#6862)\n\nContributed by Anuj Modi","shortMessageHtmlLink":"HADOOP-19178: [WASB Deprecation] Updating Documentation on Upcoming P…"}},{"before":"2ee0bf953492b66765d3d2c902407fbf9bceddec","after":"bbb17e76a7a8a995a8b202c9b9530f39bb2a2957","ref":"refs/heads/trunk","pushedAt":"2024-06-07T13:28:24.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19178: [WASB Deprecation] Updating Documentation on Upcoming Plans for Hadoop-Azure (#6862)\n\n\r\nContributed by Anuj Modi","shortMessageHtmlLink":"HADOOP-19178: [WASB Deprecation] Updating Documentation on Upcoming P…"}},{"before":"34ecfd0265d65de03718ae18d54dd27c1da736ec","after":"935bc184fa21af3d3fde27b07ebac5a031725fc9","ref":"refs/heads/branch-3.4","pushedAt":"2024-06-07T13:15:22.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19114. Upgrade to commons-compress 1.26.1 due to CVEs. (#6636)\n\n\r\nThis addresses two CVEs triggered by malformed archives\r\n\r\nImportant: Denial of Service CVE-2024-25710\r\nModerate: Denial of Service CVE-2024-26308\r\n\r\nContributed by PJ Fanning","shortMessageHtmlLink":"HADOOP-19114. Upgrade to commons-compress 1.26.1 due to CVEs. (#6636)"}},{"before":null,"after":"2ee0bf953492b66765d3d2c902407fbf9bceddec","ref":"refs/heads/HDFS-17531","pushedAt":"2024-06-06T03:30:16.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"Hexiaoqiao","name":"Hexiaoqiao","path":"/Hexiaoqiao","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1393756?s=80&v=4"},"commit":{"message":"HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755)\n\n\r\nAddresses\r\n\r\n* CVE-2024-29857 - Importing an EC certificate with specially crafted F2m parameters can cause high CPU usage during parameter evaluation.\r\n* CVE-2024-30171 - Possible timing based leakage in RSA based handshakes due to exception processing eliminated.\r\n* CVE-2024-30172 - Crafted signature and public key can be used to trigger an infinite loop in the Ed25519 verification code.\r\n* CVE-2024-301XX - When endpoint identification is enabled and an SSL socket is not created with an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address. \r\n\r\nContributed by PJ Fanning","shortMessageHtmlLink":"HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755)"}},{"before":"e5f0d613d9f5a59e74cec3b9b49f8c4eebeb18af","after":"75704ed4e4e79b3bce33223f9e598aacb89e4a86","ref":"refs/heads/gh-pages","pushedAt":"2024-06-05T14:43:33.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 2ee0bf953492b66765d3d2c902407fbf9bceddec","shortMessageHtmlLink":"deploy: 2ee0bf9"}},{"before":"6a5fbc0224504b6db3ac96258e1eff6e8379d183","after":"e5f0d613d9f5a59e74cec3b9b49f8c4eebeb18af","ref":"refs/heads/gh-pages","pushedAt":"2024-06-05T14:37:40.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: d8d3d538e463e7cb651dfe013507fa6c4576b8dc","shortMessageHtmlLink":"deploy: d8d3d53"}},{"before":"d8d3d538e463e7cb651dfe013507fa6c4576b8dc","after":"2ee0bf953492b66765d3d2c902407fbf9bceddec","ref":"refs/heads/trunk","pushedAt":"2024-06-05T14:31:23.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"steveloughran","name":"Steve Loughran","path":"/steveloughran","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/162090?s=80&v=4"},"commit":{"message":"HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755)\n\n\r\nAddresses\r\n\r\n* CVE-2024-29857 - Importing an EC certificate with specially crafted F2m parameters can cause high CPU usage during parameter evaluation.\r\n* CVE-2024-30171 - Possible timing based leakage in RSA based handshakes due to exception processing eliminated.\r\n* CVE-2024-30172 - Crafted signature and public key can be used to trigger an infinite loop in the Ed25519 verification code.\r\n* CVE-2024-301XX - When endpoint identification is enabled and an SSL socket is not created with an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address. \r\n\r\nContributed by PJ Fanning","shortMessageHtmlLink":"HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEYqJblAA","startCursor":null,"endCursor":null}},"title":"Activity · apache/hadoop"}