You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tinkerpop.apache.org by "robertdale (GitHub)" <gi...@apache.org> on 2018/12/26 20:43:19 UTC

[GitHub] [tinkerpop] robertdale opened pull request #1027: Bump Jackson Databind 2.9.8

https://issues.apache.org/jira/browse/TINKERPOP-2121

Fixes: CVE-2018-19360, CVE-2018-19361, CVE-2018-19362,  CVE-2018-1000873

```
$ docker/build.sh -i -t -n

[INFO] Apache TinkerPop ................................... SUCCESS [01:10 min]
[INFO] Apache TinkerPop :: Gremlin Shaded ................. SUCCESS [  9.105 s]
[INFO] Apache TinkerPop :: Gremlin Core ................... SUCCESS [01:10 min]
[INFO] Apache TinkerPop :: Gremlin Test ................... SUCCESS [  6.737 s]
[INFO] Apache TinkerPop :: Gremlin Groovy ................. SUCCESS [03:32 min]
[INFO] Apache TinkerPop :: Gremlin Groovy Test ............ SUCCESS [  4.568 s]
[INFO] Apache TinkerPop :: TinkerGraph Gremlin ............ SUCCESS [03:49 min]
[INFO] Apache TinkerPop :: Gremlin Benchmark .............. SUCCESS [  3.470 s]
[INFO] Apache TinkerPop :: Gremlin Driver ................. SUCCESS [ 20.742 s]
[INFO] Apache TinkerPop :: Neo4j Gremlin .................. SUCCESS [22:17 min]
[INFO] Apache TinkerPop :: Gremlin Server ................. SUCCESS [18:06 min]
[INFO] Apache TinkerPop :: Gremlin Javascript ............. SUCCESS [ 18.003 s]
[INFO] Apache TinkerPop :: Gremlin Python ................. FAILURE [01:15 min]

```

Hopefully it's just that my docker image is out of date.


[ Full content available at: https://github.com/apache/tinkerpop/pull/1027 ]
This message was relayed via gitbox.apache.org for dev@tinkerpop.apache.org

[GitHub] [tinkerpop] robertdale closed pull request #1027: Bump Jackson Databind 2.9.8

Posted by "robertdale (GitHub)" <gi...@apache.org>.
[ pull request closed by robertdale ]

[ Full content available at: https://github.com/apache/tinkerpop/pull/1027 ]
This message was relayed via gitbox.apache.org for dev@tinkerpop.apache.org

[GitHub] [tinkerpop] robertdale commented on issue #1027: Bump Jackson Databind 2.9.8

Posted by "robertdale (GitHub)" <gi...@apache.org>.
`mvn clean install -DskipIntegrationTests=false` SUCCESS

VOTE +1

[ Full content available at: https://github.com/apache/tinkerpop/pull/1027 ]
This message was relayed via gitbox.apache.org for dev@tinkerpop.apache.org

[GitHub] [tinkerpop] spmallette commented on issue #1027: Bump Jackson Databind 2.9.8

Posted by "spmallette (GitHub)" <gi...@apache.org>.
have you tested this all the way through the other branches yet? 

VOTE +1 - assuming everything passes there as well.

[ Full content available at: https://github.com/apache/tinkerpop/pull/1027 ]
This message was relayed via gitbox.apache.org for dev@tinkerpop.apache.org

[GitHub] [tinkerpop] FlorianHockmann commented on issue #1027: Bump Jackson Databind 2.9.8

Posted by "FlorianHockmann (GitHub)" <gi...@apache.org>.
I also had problems building with the Docker image when I used the flags `-i -t` recently, so there seems to be a problem in general.

VOTE +1

[ Full content available at: https://github.com/apache/tinkerpop/pull/1027 ]
This message was relayed via gitbox.apache.org for dev@tinkerpop.apache.org

[GitHub] [tinkerpop] robertdale commented on issue #1027: Bump Jackson Databind 2.9.8

Posted by "robertdale (GitHub)" <gi...@apache.org>.
tp33, master both pass up to the python module.

[ Full content available at: https://github.com/apache/tinkerpop/pull/1027 ]
This message was relayed via gitbox.apache.org for dev@tinkerpop.apache.org

[GitHub] [tinkerpop] robertdale commented on issue #1027: Bump Jackson Databind 2.9.8

Posted by "robertdale (GitHub)" <gi...@apache.org>.
Will do.

[ Full content available at: https://github.com/apache/tinkerpop/pull/1027 ]
This message was relayed via gitbox.apache.org for dev@tinkerpop.apache.org