HBASE-25568 Upgrade Thrift jar to fix CVE-2020-13949 (branch-2) by pankaj72981 · Pull Request #3083 · apache/hbase

pankaj72981 · 2021-03-24T12:25:24Z

Upgrade the libthrift version to 0.14.1

Apache-HBase · 2021-03-24T13:47:26Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	1m 14s	Docker mode activated.
		_ Prechecks _
+1 💚	dupname	0m 1s	No case conflicting files found.
+1 💚	hbaseanti	0m 0s	Patch does not have any anti-patterns.
+1 💚	@author	0m 0s	The patch does not contain any @author tags.
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 23s	Maven dependency ordering for branch
+1 💚	mvninstall	4m 1s	branch-2 passed
+1 💚	compile	9m 15s	branch-2 passed
+1 💚	checkstyle	2m 24s	branch-2 passed
+1 💚	spotbugs	11m 22s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 19s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 40s	the patch passed
+1 💚	compile	9m 20s	the patch passed
+1 💚	javac	9m 20s	the patch passed
+1 💚	checkstyle	2m 33s	the patch passed
+1 💚	whitespace	0m 0s	The patch has no whitespace issues.
+1 💚	xml	0m 3s	The patch has no ill-formed XML file.
+1 💚	hadoopcheck	13m 50s	Patch does not cause any errors with Hadoop 3.1.2 3.2.1.
+1 💚	spotbugs	13m 5s	the patch passed
		_ Other Tests _
+1 💚	asflicense	0m 35s	The patch does not generate ASF License warnings.
		81m 11s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	dupname asflicense javac spotbugs hadoopcheck hbaseanti checkstyle compile xml
uname	Linux e71d46d2cd22 4.15.0-136-generic #140-Ubuntu SMP Thu Jan 28 05:20:47 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `c8c043a`
Default Java	AdoptOpenJDK-1.8.0_282-b08
Max. process+thread count	126 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/console
versions	git=2.17.1 maven=3.6.3 spotbugs=4.2.2
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2021-03-24T15:50:48Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 36s	Docker mode activated.
-0 ⚠️	yetus	0m 6s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 25s	Maven dependency ordering for branch
+1 💚	mvninstall	4m 16s	branch-2 passed
+1 💚	compile	2m 45s	branch-2 passed
+1 💚	shadedjars	6m 54s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 52s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 21s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 54s	the patch passed
+1 💚	compile	2m 47s	the patch passed
+1 💚	javac	2m 47s	the patch passed
+1 💚	shadedjars	6m 48s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 53s	the patch passed
		_ Other Tests _
+1 💚	unit	163m 38s	root in the patch passed.
		204m 36s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux f9f7d7ab28f6 4.15.0-112-generic #113-Ubuntu SMP Thu Jul 9 23:41:39 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `c8c043a`
Default Java	AdoptOpenJDK-11.0.10+9
Test Results	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/testReport/
Max. process+thread count	6254 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/console
versions	git=2.17.1 maven=3.6.3
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2021-03-24T19:35:16Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	1m 20s	Docker mode activated.
-0 ⚠️	yetus	0m 7s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 22s	Maven dependency ordering for branch
+1 💚	mvninstall	3m 53s	branch-2 passed
+1 💚	compile	2m 26s	branch-2 passed
+1 💚	shadedjars	6m 32s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 8s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 19s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 38s	the patch passed
+1 💚	compile	2m 27s	the patch passed
+1 💚	javac	2m 27s	the patch passed
+1 💚	shadedjars	6m 32s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 10s	the patch passed
		_ Other Tests _
+1 💚	unit	392m 18s	root in the patch passed.
		428m 59s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/artifact/yetus-jdk8-hadoop2-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux e5e14eb85164 4.15.0-136-generic #140-Ubuntu SMP Thu Jan 28 05:20:47 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `c8c043a`
Default Java	AdoptOpenJDK-1.8.0_282-b08
Test Results	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/testReport/
Max. process+thread count	3978 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/1/console
versions	git=2.17.1 maven=3.6.3
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2021-03-25T05:15:32Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 35s	Docker mode activated.
		_ Prechecks _
+1 💚	dupname	0m 1s	No case conflicting files found.
+1 💚	hbaseanti	0m 0s	Patch does not have any anti-patterns.
+1 💚	@author	0m 0s	The patch does not contain any @author tags.
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 25s	Maven dependency ordering for branch
+1 💚	mvninstall	3m 34s	branch-2 passed
+1 💚	compile	8m 45s	branch-2 passed
+1 💚	checkstyle	2m 1s	branch-2 passed
+1 💚	spotbugs	10m 11s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 21s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 16s	the patch passed
+1 💚	compile	8m 43s	the patch passed
+1 💚	javac	8m 43s	the patch passed
+1 💚	checkstyle	2m 2s	the patch passed
+1 💚	whitespace	0m 0s	The patch has no whitespace issues.
+1 💚	xml	0m 3s	The patch has no ill-formed XML file.
+1 💚	hadoopcheck	12m 3s	Patch does not cause any errors with Hadoop 3.1.2 3.2.1.
+1 💚	spotbugs	14m 25s	the patch passed
		_ Other Tests _
+1 💚	asflicense	0m 43s	The patch does not generate ASF License warnings.
		76m 18s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/2/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	dupname asflicense javac spotbugs hadoopcheck hbaseanti checkstyle compile xml
uname	Linux 6dc9f1e11ee4 4.15.0-58-generic #64-Ubuntu SMP Tue Aug 6 11:12:41 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `124ea5e`
Default Java	AdoptOpenJDK-1.8.0_282-b08
Max. process+thread count	141 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/2/console
versions	git=2.17.1 maven=3.6.3 spotbugs=4.2.2
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2021-03-25T07:43:38Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 35s	Docker mode activated.
-0 ⚠️	yetus	0m 6s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 26s	Maven dependency ordering for branch
+1 💚	mvninstall	4m 16s	branch-2 passed
+1 💚	compile	2m 46s	branch-2 passed
+1 💚	shadedjars	6m 45s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 52s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 21s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 56s	the patch passed
+1 💚	compile	2m 49s	the patch passed
+1 💚	javac	2m 49s	the patch passed
+1 💚	shadedjars	6m 44s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 54s	the patch passed
		_ Other Tests _
+1 💚	unit	183m 2s	root in the patch passed.
		224m 26s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/2/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux 1797ad5616bd 4.15.0-58-generic #64-Ubuntu SMP Tue Aug 6 11:12:41 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `124ea5e`
Default Java	AdoptOpenJDK-11.0.10+9
Test Results	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/2/testReport/
Max. process+thread count	6871 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/2/console
versions	git=2.17.1 maven=3.6.3
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2021-03-25T18:41:29Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 36s	Docker mode activated.
		_ Prechecks _
+1 💚	dupname	0m 1s	No case conflicting files found.
+1 💚	hbaseanti	0m 0s	Patch does not have any anti-patterns.
+1 💚	@author	0m 0s	The patch does not contain any @author tags.
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 32s	Maven dependency ordering for branch
+1 💚	mvninstall	3m 30s	branch-2 passed
+1 💚	compile	8m 45s	branch-2 passed
+1 💚	checkstyle	2m 2s	branch-2 passed
+1 💚	spotbugs	10m 9s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 20s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 19s	the patch passed
+1 💚	compile	8m 35s	the patch passed
+1 💚	javac	8m 35s	the patch passed
+1 💚	checkstyle	2m 1s	the patch passed
+1 💚	whitespace	0m 0s	The patch has no whitespace issues.
+1 💚	xml	0m 3s	The patch has no ill-formed XML file.
+1 💚	hadoopcheck	11m 53s	Patch does not cause any errors with Hadoop 3.1.2 3.2.1.
+1 💚	spotbugs	13m 58s	the patch passed
		_ Other Tests _
+1 💚	asflicense	0m 41s	The patch does not generate ASF License warnings.
		75m 15s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	dupname asflicense javac spotbugs hadoopcheck hbaseanti checkstyle compile xml
uname	Linux 6882c66a6b41 4.15.0-58-generic #64-Ubuntu SMP Tue Aug 6 11:12:41 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `124ea5e`
Default Java	AdoptOpenJDK-1.8.0_282-b08
Max. process+thread count	141 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/console
versions	git=2.17.1 maven=3.6.3 spotbugs=4.2.2
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2021-03-25T22:35:01Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	4m 2s	Docker mode activated.
-0 ⚠️	yetus	0m 7s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 23s	Maven dependency ordering for branch
+1 💚	mvninstall	4m 46s	branch-2 passed
+1 💚	compile	3m 5s	branch-2 passed
+1 💚	shadedjars	7m 32s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	4m 20s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 19s	Maven dependency ordering for patch
+1 💚	mvninstall	4m 31s	the patch passed
+1 💚	compile	3m 6s	the patch passed
+1 💚	javac	3m 6s	the patch passed
+1 💚	shadedjars	7m 27s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	4m 18s	the patch passed
		_ Other Tests _
+1 💚	unit	261m 16s	root in the patch passed.
		308m 52s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux 50a0eafde4b3 4.15.0-128-generic #131-Ubuntu SMP Wed Dec 9 06:57:35 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `124ea5e`
Default Java	AdoptOpenJDK-11.0.10+9
Test Results	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/testReport/
Max. process+thread count	4740 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/console
versions	git=2.17.1 maven=3.6.3
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2021-03-25T23:33:32Z

💔 -1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 38s	Docker mode activated.
-0 ⚠️	yetus	0m 7s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ branch-2 Compile Tests _
+0 🆗	mvndep	0m 25s	Maven dependency ordering for branch
+1 💚	mvninstall	3m 35s	branch-2 passed
+1 💚	compile	2m 12s	branch-2 passed
+1 💚	shadedjars	5m 54s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 5s	branch-2 passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 21s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 16s	the patch passed
+1 💚	compile	2m 17s	the patch passed
+1 💚	javac	2m 17s	the patch passed
+1 💚	shadedjars	5m 57s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 8s	the patch passed
		_ Other Tests _
-1 ❌	unit	333m 16s	root in the patch failed.
		367m 23s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/artifact/yetus-jdk8-hadoop2-check/output/Dockerfile
GITHUB PR	#3083
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux 81aa98d2a3e4 4.15.0-60-generic #67-Ubuntu SMP Thu Aug 22 16:55:30 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	branch-2 / `124ea5e`
Default Java	AdoptOpenJDK-1.8.0_282-b08
unit	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/artifact/yetus-jdk8-hadoop2-check/output/patch-unit-root.txt
Test Results	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/testReport/
Max. process+thread count	4566 (vs. ulimit of 12500)
modules	C: hbase-thrift hbase-examples . U: .
Console output	https://ci-hadoop.apache.org/job/HBase/job/HBase-PreCommit-GitHub-PR/job/PR-3083/3/console
versions	git=2.17.1 maven=3.6.3
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

pankaj72981 · 2021-03-26T04:01:50Z

Test case failures are not relevant, passing locally.

HBASE-25568 Upgrade Thrift jar to fix CVE-2020-13949

0e672db

pankaj72981 changed the title ~~HBASE-25568 Upgrade Thrift jar to fix CVE-2020-13949~~ HBASE-25568 Upgrade Thrift jar to fix CVE-2020-13949 (branch-2) Mar 24, 2021

pankaj72981 merged commit 9a84267 into apache:branch-2 Mar 26, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

HBASE-25568 Upgrade Thrift jar to fix CVE-2020-13949 (branch-2)#3083

HBASE-25568 Upgrade Thrift jar to fix CVE-2020-13949 (branch-2)#3083
pankaj72981 merged 1 commit intoapache:branch-2from
pankaj72981:HBASE-25568-b-2

pankaj72981 commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

pankaj72981 commented Mar 26, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

pankaj72981 commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 24, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

Apache-HBase commented Mar 25, 2021

Uh oh!

pankaj72981 commented Mar 26, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants