You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@zeppelin.apache.org by GitBox <gi...@apache.org> on 2022/03/16 11:40:31 UTC
[GitHub] [zeppelin] pjfanning opened a new pull request #4315: upgrade commons-compress and commons-io due to security concerns
pjfanning opened a new pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315
### What is this PR for?
A few sentences describing the overall goals of the pull request's commits.
First time? Check out the contributing guide - https://zeppelin.apache.org/contribution/contributions.html
### What type of PR is it?
Bug Fix
Related to https://issues.apache.org/jira/browse/ZEPPELIN-4657
commons-compress 1.20 has CVEs - see https://mvnrepository.com/artifact/org.apache.commons/commons-compress
### Todos
* [ ] - Task
### What is the Jira issue?
* https://issues.apache.org/jira/browse/ZEPPELIN-4657
### How should this be tested?
* Strongly recommended: add automated unit tests for any new or changed behavior
* Outline any manual steps to test the PR here.
### Screenshots (if appropriate)
### Questions:
* Does the licenses files need update?
* Is there breaking changes for older versions?
* Does this needs documentation?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [zeppelin] zjffdu commented on pull request #4315: upgrade commons-compress and commons-io due to security concerns
Posted by GitBox <gi...@apache.org>.
zjffdu commented on pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315#issuecomment-1069175049
Thanks @pjfanning Could you update the PR description?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [zeppelin] zjffdu commented on pull request #4315: [ZEPPELIN-5683] upgrade commons-compress and commons-io due to security concerns
Posted by GitBox <gi...@apache.org>.
zjffdu commented on pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315#issuecomment-1069190418
PR LGTM, thanks @pjfanning
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [zeppelin] pjfanning commented on pull request #4315: [ZEPPELIN-5683] upgrade commons-compress and commons-io due to security concerns
Posted by GitBox <gi...@apache.org>.
pjfanning commented on pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315#issuecomment-1069187577
I created ZEPPELIN-5683
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [zeppelin] zjffdu commented on pull request #4315: upgrade commons-compress and commons-io due to security concerns
Posted by GitBox <gi...@apache.org>.
zjffdu commented on pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315#issuecomment-1069182393
@pjfanning PR description LGTM, but could you create a separate jira ticket for it? Usually, each PR is associated with one jira ticket. You can create ticket under [ZEPPELIN-4657](https://issues.apache.org/jira/browse/ZEPPELIN-4657) as sub-task.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [zeppelin] pjfanning commented on pull request #4315: upgrade commons-compress and commons-io due to security concerns
Posted by GitBox <gi...@apache.org>.
pjfanning commented on pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315#issuecomment-1069177313
@zjffdu is the change I made to the PR description ok?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [zeppelin] zjffdu edited a comment on pull request #4315: upgrade commons-compress and commons-io due to security concerns
Posted by GitBox <gi...@apache.org>.
zjffdu edited a comment on pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315#issuecomment-1069182393
@pjfanning PR description LGTM, but could you create a separate jira ticket for it? Usually, each PR is associated with one jira ticket. You can create ticket under [ZEPPELIN-4657](https://issues.apache.org/jira/browse/ZEPPELIN-4657) as sub-task.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [zeppelin] zjffdu merged pull request #4315: [ZEPPELIN-5683] upgrade commons-compress and commons-io due to security concerns
Posted by GitBox <gi...@apache.org>.
zjffdu merged pull request #4315:
URL: https://github.com/apache/zeppelin/pull/4315
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org