You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@bigtop.apache.org by "Evans Ye (JIRA)" <ji...@apache.org> on 2018/07/08 08:35:00 UTC

[jira] [Created] (BIGTOP-3052) Maven version is fixed in security verification code

Evans Ye created BIGTOP-3052:
--------------------------------

             Summary: Maven version is fixed in security verification code
                 Key: BIGTOP-3052
                 URL: https://issues.apache.org/jira/browse/BIGTOP-3052
             Project: Bigtop
          Issue Type: Bug
          Components: toolchain
    Affects Versions: 1.3.0
            Reporter: Evans Ye
            Assignee: Evans Ye


In BIGTOP-2379, the maven.pp has been refactored using $mvnversion for versioning:

[https://github.com/apache/bigtop/commit/d401eda870a2abfed2b897ed488ee2a571678e68#diff-f5c19b3a16072bc1633fd8db96c6698cR18]

In BIGTOP-3037, secure download for maven was introduced. However, the version is fixed to 3.5.3

[https://github.com/apache/bigtop/commit/980e1883a66256b904cdcd11419f5745880ec55a#diff-f5c19b3a16072bc1633fd8db96c6698cR30]

 

When maven version automatically upgraded (BIGTOP-3031), the version of downloaded maven and the signature diverse.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)