HADOOP-18468: jettison 1.5.1 (CVE fix) #4937

pjfanning · 2022-09-25T16:34:24Z

Description of PR

A fix for https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40149

How was this patch tested?

For code changes:

Does the title or this PR starts with the corresponding JIRA issue id (e.g. 'HADOOP-17799. Your PR title ...')?
Object storage: have the integration tests been executed and the endpoint declared according to the connector-specific documentation?
If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?
If applicable, have you updated the LICENSE, LICENSE-binary, NOTICE-binary files?

slfan1989 · 2022-09-25T21:40:36Z

@pjfanning Thank you very much for your contribution, but can the specific fix of CVE be explained in JIRA and PR?

I saw the specific description, thank you, no other questions

pjfanning · 2022-09-25T21:44:53Z

@slfan1989 I added a link to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40149

slfan1989 · 2022-09-25T21:45:49Z

@slfan1989 I added a link to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40149

Thank you very much.

The pr title can be changed to HADOOP-18468: jettison 1.5.1 (CVE-2022-40149 fix), it will be better.

steveloughran · 2022-09-26T14:10:18Z

container launch problems?


[2022-09-25T18:38:50.037Z] ============================================================================

[2022-09-25T18:38:50.037Z] ============================================================================

[2022-09-25T18:38:50.037Z]           Checking client artifacts on branch with shaded clients

[2022-09-25T18:38:50.037Z] ============================================================================

[2022-09-25T18:38:50.037Z] ============================================================================

[2022-09-25T18:38:50.037Z] 

[2022-09-25T18:38:50.037Z] 

[2022-09-25T18:38:56.988Z] cd /home/jenkins/jenkins-agent/workspace/hadoop-multibranch_PR-4937/ubuntu-focal/src

[2022-09-25T18:38:56.988Z] /usr/bin/mvn --batch-mode -Dmaven.repo.local=/home/jenkins/jenkins-agent/workspace/hadoop-multibranch_PR-4937/yetus-m2/hadoop-trunk-patch-0 verify -fae --batch-mode -am -pl hadoop-client-modules/hadoop-client-check-invariants -pl hadoop-client-modules/hadoop-client-check-test-invariants -pl hadoop-client-modules/hadoop-client-integration-tests -Dtest=NoUnitTests -Dmaven.javadoc.skip=true -Dcheckstyle.skip=true -Dspotbugs.skip=true > /home/jenkins/jenkins-agent/workspace/hadoop-multibranch_PR-4937/ubuntu-focal/out/branch-shadedclient.txt 2>&1

[2022-09-25T18:39:39.312Z] ERROR: Caught signal TERM.

[2022-09-25T18:39:41.470Z] time="2022-09-25T18:39:41Z" level=error msg="error waiting for container: unexpected EOF"

pjfanning · 2022-09-26T14:53:57Z

I ran this and it was ok:

mvn --batch-mode verify -fae -am -pl hadoop-client-modules/hadoop-client-check-invariants -pl hadoop-client-modules/hadoop-client-check-test-invariants -pl hadoop-client-modules/hadoop-client-integration-tests -Dtest=NoUnitTests -Dmaven.javadoc.skip=true -Dcheckstyle.skip=true -Dspotbugs.skip=true

hadoop-yetus · 2022-09-27T21:20:25Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 42s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 0s		codespell was not available.
+0 🆗	detsecrets	0m 0s		detect-secrets was not available.
+0 🆗	xmllint	0m 0s		xmllint was not available.
+0 🆗	shelldocs	0m 0s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
-1 ❌	test4tests	0m 0s		The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
			_ trunk Compile Tests _
+0 🆗	mvndep	15m 33s		Maven dependency ordering for branch
+1 💚	mvninstall	25m 55s		trunk passed
+1 💚	compile	23m 21s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	compile	20m 54s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	mvnsite	19m 27s		trunk passed
+1 💚	javadoc	8m 10s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 32s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	shadedclient	35m 21s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 33s		Maven dependency ordering for patch
+1 💚	mvninstall	22m 45s		the patch passed
+1 💚	compile	22m 45s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javac	22m 45s		the patch passed
+1 💚	compile	21m 1s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	javac	21m 1s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	19m 7s		the patch passed
+1 💚	shellcheck	0m 0s		No new issues.
+1 💚	javadoc	8m 1s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 29s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	shadedclient	37m 19s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	386m 12s	/patch-unit-root.txt	root in the patch failed.
+1 💚	asflicense	1m 11s		The patch does not generate ASF License warnings.
		655m 7s

Reason	Tests
Failed junit tests	hadoop.yarn.server.resourcemanager.webapp.TestRMWebServicesReservation
	hadoop.yarn.server.resourcemanager.webapp.TestRMWebServicesCapacitySchedDynamicConfig
	hadoop.yarn.server.resourcemanager.webapp.TestRMWebServicesAppsModification
	hadoop.yarn.server.resourcemanager.webapp.TestRMWebServicesNodes
	hadoop.yarn.server.resourcemanager.webapp.TestRMWebServicesDelegationTokens

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/2/artifact/out/Dockerfile
GITHUB PR	#4937
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint shellcheck shelldocs
uname	Linux 878df39aa627 4.15.0-191-generic #202-Ubuntu SMP Thu Aug 4 01:49:29 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `ca554fd`
Default Java	Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/2/testReport/
Max. process+thread count	3493 (vs. ulimit of 5500)
modules	C: hadoop-project . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/2/console
versions	git=2.25.1 maven=3.6.3 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

steveloughran · 2022-09-28T12:26:12Z

do the tests which fail go anywhere near jettison?

pjfanning · 2022-09-28T15:11:18Z

@steveloughran these tests do use jettison so I will need to investigate them. So far, there isn't anything obvious. There are some exceptions in the logs but they are not definitely related to the jettison change. I will continue to look for the cause.

hadoop-yetus · 2022-09-29T15:17:33Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 43s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 1s		codespell was not available.
+0 🆗	detsecrets	0m 1s		detect-secrets was not available.
+0 🆗	xmllint	0m 1s		xmllint was not available.
+0 🆗	shelldocs	0m 1s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
+1 💚	test4tests	0m 0s		The patch appears to include 1 new or modified test files.
			_ trunk Compile Tests _
+0 🆗	mvndep	16m 4s		Maven dependency ordering for branch
+1 💚	mvninstall	25m 55s		trunk passed
+1 💚	compile	23m 28s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	compile	20m 55s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	checkstyle	4m 8s		trunk passed
+1 💚	mvnsite	19m 36s		trunk passed
+1 💚	javadoc	8m 9s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 29s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+0 🆗	spotbugs	0m 34s		branch/hadoop-project no spotbugs output file (spotbugsXml.xml)
+1 💚	shadedclient	53m 12s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 31s		Maven dependency ordering for patch
+1 💚	mvninstall	23m 27s		the patch passed
+1 💚	compile	22m 47s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javac	22m 47s		the patch passed
+1 💚	compile	21m 4s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	javac	21m 4s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
-0 ⚠️	checkstyle	4m 32s	/results-checkstyle-root.txt	root: The patch generated 2 new + 0 unchanged - 0 fixed = 2 total (was 0)
+1 💚	mvnsite	19m 5s		the patch passed
+1 💚	shellcheck	0m 0s		No new issues.
+1 💚	javadoc	8m 9s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 23s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+0 🆗	spotbugs	0m 33s		hadoop-project has no data from spotbugs
+1 💚	shadedclient	54m 11s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	807m 2s	/patch-unit-root.txt	root in the patch passed.
+1 💚	asflicense	2m 23s		The patch does not generate ASF License warnings.
		1161m 48s

Reason	Tests
Failed junit tests	hadoop.hdfs.TestRollingUpgrade

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/3/artifact/out/Dockerfile
GITHUB PR	#4937
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint spotbugs checkstyle shellcheck shelldocs
uname	Linux 7ade62953985 4.15.0-191-generic #202-Ubuntu SMP Thu Aug 4 01:49:29 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `11c0fd6`
Default Java	Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/3/testReport/
Max. process+thread count	3794 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/3/console
versions	git=2.25.1 maven=3.6.3 spotbugs=4.2.2 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

issues with formatting of json in tests

hadoop-yetus · 2022-10-02T06:32:49Z

🎊 +1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 37s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 1s		codespell was not available.
+0 🆗	detsecrets	0m 1s		detect-secrets was not available.
+0 🆗	xmllint	0m 1s		xmllint was not available.
+0 🆗	shelldocs	0m 1s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
+1 💚	test4tests	0m 0s		The patch appears to include 1 new or modified test files.
			_ trunk Compile Tests _
+0 🆗	mvndep	16m 26s		Maven dependency ordering for branch
+1 💚	mvninstall	26m 14s		trunk passed
+1 💚	compile	25m 5s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	compile	21m 44s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	checkstyle	4m 23s		trunk passed
+1 💚	mvnsite	21m 29s		trunk passed
+1 💚	javadoc	8m 41s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 34s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+0 🆗	spotbugs	0m 32s		branch/hadoop-project no spotbugs output file (spotbugsXml.xml)
+1 💚	shadedclient	58m 5s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 33s		Maven dependency ordering for patch
+1 💚	mvninstall	24m 26s		the patch passed
+1 💚	compile	24m 27s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javac	24m 27s		the patch passed
+1 💚	compile	21m 44s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	javac	21m 44s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
-0 ⚠️	checkstyle	4m 10s	/results-checkstyle-root.txt	root: The patch generated 2 new + 0 unchanged - 0 fixed = 2 total (was 0)
+1 💚	mvnsite	20m 3s		the patch passed
+1 💚	shellcheck	0m 0s		No new issues.
+1 💚	javadoc	8m 38s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	8m 34s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+0 🆗	spotbugs	0m 27s		hadoop-project has no data from spotbugs
+1 💚	shadedclient	53m 59s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
+1 💚	unit	806m 59s		root in the patch passed.
+1 💚	asflicense	2m 10s		The patch does not generate ASF License warnings.
		1177m 29s

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/4/artifact/out/Dockerfile
GITHUB PR	#4937
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint spotbugs checkstyle shellcheck shelldocs
uname	Linux 4a8e561abdbe 4.15.0-191-generic #202-Ubuntu SMP Thu Aug 4 01:49:29 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `20f29f4`
Default Java	Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/4/testReport/
Max. process+thread count	3750 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/4/console
versions	git=2.25.1 maven=3.6.3 spotbugs=4.2.2 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

steveloughran · 2022-10-06T09:48:11Z

lgtm. +1 pending the checkstyle fixes, which are just line length

./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager/src/test/java/org/apache/hadoop/yarn/server/resourcemanager/webapp/TestRMWebServicesCapacitySched.java:339:    assertEquals(prettyPrintJson(getResourceAsString(expectedResourceFilename)), prettyPrintJson(actual));: Line is longer than 100 characters (found 106). [LineLength]
./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager/src/test/java/org/apache/hadoop/yarn/server/resourcemanager/webapp/TestRMWebServicesCapacitySched.java:344:    return objectMapper.writerWithDefaultPrettyPrinter().writeValueAsString(objectMapper.readTree(in));: Line is longer than 100 characters (found 103). [LineLength]

hadoop-yetus · 2022-10-07T05:50:05Z

💔 -1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	1m 24s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 0s		codespell was not available.
+0 🆗	detsecrets	0m 0s		detect-secrets was not available.
+0 🆗	xmllint	0m 0s		xmllint was not available.
+0 🆗	shelldocs	0m 0s		Shelldocs was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
+1 💚	test4tests	0m 0s		The patch appears to include 1 new or modified test files.
			_ trunk Compile Tests _
+0 🆗	mvndep	15m 30s		Maven dependency ordering for branch
+1 💚	mvninstall	26m 45s		trunk passed
+1 💚	compile	25m 27s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	compile	22m 21s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	checkstyle	4m 49s		trunk passed
+1 💚	mvnsite	19m 59s		trunk passed
+1 💚	javadoc	8m 16s		trunk passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 33s		trunk passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+0 🆗	spotbugs	0m 27s		branch/hadoop-project no spotbugs output file (spotbugsXml.xml)
+1 💚	shadedclient	53m 33s		branch has no errors when building and testing our client artifacts.
			_ Patch Compile Tests _
+0 🆗	mvndep	0m 33s		Maven dependency ordering for patch
+1 💚	mvninstall	23m 21s		the patch passed
+1 💚	compile	22m 53s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javac	22m 53s		the patch passed
+1 💚	compile	20m 56s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+1 💚	javac	20m 56s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	checkstyle	4m 2s		the patch passed
+1 💚	mvnsite	19m 11s		the patch passed
+1 💚	shellcheck	0m 0s		No new issues.
+1 💚	javadoc	7m 58s		the patch passed with JDK Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04
+1 💚	javadoc	7m 29s		the patch passed with JDK Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
+0 🆗	spotbugs	0m 26s		hadoop-project has no data from spotbugs
+1 💚	shadedclient	53m 47s		patch has no errors when building and testing our client artifacts.
			_ Other Tests _
-1 ❌	unit	820m 9s	/patch-unit-root.txt	root in the patch passed.
+1 💚	asflicense	2m 18s		The patch does not generate ASF License warnings.
		1179m 10s

Reason	Tests
Failed junit tests	hadoop.hdfs.TestRollingUpgrade
	hadoop.yarn.server.applicationhistoryservice.webapp.TestAHSWebServices

Subsystem	Report/Notes
Docker	ClientAPI=1.41 ServerAPI=1.41 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/5/artifact/out/Dockerfile
GITHUB PR	#4937
Optional Tests	dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient codespell detsecrets xmllint spotbugs checkstyle shellcheck shelldocs
uname	Linux c43a58c077e4 4.15.0-191-generic #202-Ubuntu SMP Thu Aug 4 01:49:29 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/bin/hadoop.sh
git revision	trunk / `e72e25a`
Default Java	Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Multi-JDK versions	/usr/lib/jvm/java-11-openjdk-amd64:Ubuntu-11.0.16+8-post-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-8-openjdk-amd64:Private Build-1.8.0_342-8u342-b07-0ubuntu1~20.04-b07
Test Results	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/5/testReport/
Max. process+thread count	3923 (vs. ulimit of 5500)
modules	C: hadoop-project hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager . U: .
Console output	https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-4937/5/console
versions	git=2.25.1 maven=3.6.3 spotbugs=4.2.2 shellcheck=0.7.0
Powered by	Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

steveloughran · 2022-10-07T14:42:25Z

dont see any of those test failures are related, more server launch flakiness.

thoughts?

…#4937) Contributed by PJ Fanning Change-Id: If80704a83bc3bc065be293a89b0c3bb436dcf60f

Contributed by PJ Fanning

…#4937) Contributed by PJ Fanning

HADOOP-18468: jettison 1.5.1 (CVE fix)

20f29f4

issues with formatting of json in tests

pjfanning force-pushed the jettison branch from 11c0fd6 to 20f29f4 Compare October 1, 2022 10:54

slfan1989 mentioned this pull request Oct 4, 2022

HADOOP-18478. Upgrade jettison to 1.5.1 to mitigate CVE-2022-40149 #4969

Closed

4 tasks

Update TestRMWebServicesCapacitySched.java

e72e25a

steveloughran merged commit 5eddec8 into apache:trunk Oct 7, 2022

pjfanning deleted the jettison branch October 7, 2022 14:48

steveloughran added a commit to steveloughran/hadoop that referenced this pull request Oct 7, 2022

HADOOP-18468: Upgrade jettison to 1.5.1 to fix CVE-2022-40149 (apache…

b7e9179

…#4937) Contributed by PJ Fanning Change-Id: If80704a83bc3bc065be293a89b0c3bb436dcf60f

steveloughran mentioned this pull request Oct 7, 2022

HADOOP-18468: Upgrade jettison to 1.5.1 to fix CVE-2022-40149 (#4937) #4985

Merged

4 tasks

steveloughran added a commit that referenced this pull request Oct 10, 2022

HADOOP-18468: Upgrade jettison to 1.5.1 to fix CVE-2022-40149 (#4937)

e360e76

Contributed by PJ Fanning

asfgit pushed a commit that referenced this pull request Oct 10, 2022

HADOOP-18468: Upgrade jettison to 1.5.1 to fix CVE-2022-40149 (#4937)

cc5344e

Contributed by PJ Fanning

HarshitGupta11 pushed a commit to HarshitGupta11/hadoop that referenced this pull request Nov 28, 2022

HADOOP-18468: Upgrade jettison to 1.5.1 to fix CVE-2022-40149 (apache…

15b5aef

…#4937) Contributed by PJ Fanning

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

HADOOP-18468: jettison 1.5.1 (CVE fix) #4937

HADOOP-18468: jettison 1.5.1 (CVE fix) #4937

Uh oh!

pjfanning commented Sep 25, 2022 •

edited

Loading

Uh oh!

slfan1989 commented Sep 25, 2022 •

edited

Loading

Uh oh!

pjfanning commented Sep 25, 2022

Uh oh!

slfan1989 commented Sep 25, 2022 •

edited

Loading

Uh oh!

steveloughran commented Sep 26, 2022

Uh oh!

pjfanning commented Sep 26, 2022

Uh oh!

hadoop-yetus commented Sep 27, 2022

Uh oh!

steveloughran commented Sep 28, 2022

Uh oh!

pjfanning commented Sep 28, 2022

Uh oh!

hadoop-yetus commented Sep 29, 2022

Uh oh!

hadoop-yetus commented Oct 2, 2022

Uh oh!

steveloughran commented Oct 6, 2022

Uh oh!

hadoop-yetus commented Oct 7, 2022

Uh oh!

steveloughran commented Oct 7, 2022

Uh oh!

Uh oh!

HADOOP-18468: jettison 1.5.1 (CVE fix) #4937

HADOOP-18468: jettison 1.5.1 (CVE fix) #4937

Uh oh!

Conversation

pjfanning commented Sep 25, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description of PR

How was this patch tested?

For code changes:

Uh oh!

slfan1989 commented Sep 25, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pjfanning commented Sep 25, 2022

Uh oh!

slfan1989 commented Sep 25, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

steveloughran commented Sep 26, 2022

Uh oh!

pjfanning commented Sep 26, 2022

Uh oh!

hadoop-yetus commented Sep 27, 2022

Uh oh!

steveloughran commented Sep 28, 2022

Uh oh!

pjfanning commented Sep 28, 2022

Uh oh!

hadoop-yetus commented Sep 29, 2022

Uh oh!

hadoop-yetus commented Oct 2, 2022

Uh oh!

steveloughran commented Oct 6, 2022

Uh oh!

hadoop-yetus commented Oct 7, 2022

Uh oh!

steveloughran commented Oct 7, 2022

Uh oh!

Uh oh!

pjfanning commented Sep 25, 2022 •

edited

Loading

slfan1989 commented Sep 25, 2022 •

edited

Loading

slfan1989 commented Sep 25, 2022 •

edited

Loading