Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HADOOP-17601. Upgrade Jackson databind in branch-2.10 to 2.9.10.7 #2835

Merged
merged 1 commit into from
Apr 13, 2021

Conversation

amahussein
Copy link
Contributor

Upgrade Jackson databind in branch-2.10 from 2.9.10.6 to 2.9.10.7: https://issues.apache.org/jira/browse/HADOOP-17601

Two known vulnerabilities found in Jackson-databind:

CVE-2021-20190 high severity
CVE-2020-25649 high severity

@hadoop-yetus
Copy link

💔 -1 overall

Vote Subsystem Runtime Comment
+0 🆗 reexec 10m 57s Docker mode activated.
_ Prechecks _
+1 💚 dupname 0m 0s No case conflicting files found.
+1 💚 @author 0m 0s The patch does not contain any @author tags.
-1 ❌ test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
_ branch-2.10 Compile Tests _
+1 💚 mvninstall 15m 24s branch-2.10 passed
+1 💚 compile 0m 21s branch-2.10 passed with JDK Azul Systems, Inc.-1.7.0_262-b10
+1 💚 compile 0m 18s branch-2.10 passed with JDK Private Build-1.8.0_282-8u282-b08-0ubuntu1~16.04-b08
+1 💚 mvnsite 0m 22s branch-2.10 passed
+1 💚 javadoc 0m 23s branch-2.10 passed with JDK Azul Systems, Inc.-1.7.0_262-b10
+1 💚 javadoc 0m 18s branch-2.10 passed with JDK Private Build-1.8.0_282-8u282-b08-0ubuntu1~16.04-b08
_ Patch Compile Tests _
+1 💚 mvninstall 0m 13s the patch passed
+1 💚 compile 0m 14s the patch passed with JDK Azul Systems, Inc.-1.7.0_262-b10
+1 💚 javac 0m 14s the patch passed
+1 💚 compile 0m 12s the patch passed with JDK Private Build-1.8.0_282-8u282-b08-0ubuntu1~16.04-b08
+1 💚 javac 0m 12s the patch passed
+1 💚 mvnsite 0m 14s the patch passed
+1 💚 whitespace 0m 0s The patch has no whitespace issues.
+1 💚 xml 0m 2s The patch has no ill-formed XML file.
+1 💚 javadoc 0m 14s the patch passed with JDK Azul Systems, Inc.-1.7.0_262-b10
+1 💚 javadoc 0m 13s the patch passed with JDK Private Build-1.8.0_282-8u282-b08-0ubuntu1~16.04-b08
_ Other Tests _
+1 💚 unit 0m 12s hadoop-project in the patch passed.
+1 💚 asflicense 0m 25s The patch does not generate ASF License warnings.
33m 15s
Subsystem Report/Notes
Docker ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-2835/1/artifact/out/Dockerfile
GITHUB PR #2835
Optional Tests dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient xml
uname Linux 690657b0e940 4.15.0-58-generic #64-Ubuntu SMP Tue Aug 6 11:12:41 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/bin/hadoop.sh
git revision branch-2.10 / 616256b
Default Java Private Build-1.8.0_282-8u282-b08-0ubuntu1~16.04-b08
Multi-JDK versions /usr/lib/jvm/zulu-7-amd64:Azul Systems, Inc.-1.7.0_262-b10 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_282-8u282-b08-0ubuntu1~16.04-b08
Test Results https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-2835/1/testReport/
Max. process+thread count 93 (vs. ulimit of 5500)
modules C: hadoop-project U: hadoop-project
Console output https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-2835/1/console
versions git=2.7.4 maven=3.3.9
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Copy link
Contributor

@jojochuang jojochuang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM I don't expect API changes between the hotfix versions. So should be okay

@amahussein
Copy link
Contributor Author

Thanks @jojochuang !
Can you please commit the change to branch-2.10?

@jojochuang jojochuang merged commit 1056ca3 into apache:branch-2.10 Apr 13, 2021
@jojochuang
Copy link
Contributor

Sorry my bad. Merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants