You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@impala.apache.org by "Joe McDonnell (Code Review)" <ge...@cloudera.org> on 2022/03/24 00:37:14 UTC
[Impala-ASF-CR] IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
Joe McDonnell has uploaded this change for review. ( http://gerrit.cloudera.org:8080/18348
Change subject: IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
......................................................................
IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
This upgrades pac4j and several of its dependencies
(including xmlsec) to address CVEs in those components.
Specifically:
- pac4j 4.5.5 addresses CVE-2021-44878
- xmlsec 2.2.3 addresses CVE-2021-40690
- bcprov 1.68 addresses CVE-2020-15522
This also upgrade springframework to 5.2.9.RELEASE to
match the version for pac4j 4.5.5.
Testing:
- Ran core job
Change-Id: I8421d867dd0fce8eeaa6bc13a511ca3e8dd05723
---
M java/pom.xml
1 file changed, 7 insertions(+), 5 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/48/18348/1
--
To view, visit http://gerrit.cloudera.org:8080/18348
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newchange
Gerrit-Change-Id: I8421d867dd0fce8eeaa6bc13a511ca3e8dd05723
Gerrit-Change-Number: 18348
Gerrit-PatchSet: 1
Gerrit-Owner: Joe McDonnell <jo...@cloudera.com>
[Impala-ASF-CR] IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/18348 )
Change subject: IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
......................................................................
Patch Set 1:
Build Successful
https://jenkins.impala.io/job/gerrit-code-review-checks/10329/ : Initial code review checks passed. Use gerrit-verify-dryrun-external or gerrit-verify-dryrun to run full precommit tests.
--
To view, visit http://gerrit.cloudera.org:8080/18348
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I8421d867dd0fce8eeaa6bc13a511ca3e8dd05723
Gerrit-Change-Number: 18348
Gerrit-PatchSet: 1
Gerrit-Owner: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Comment-Date: Thu, 24 Mar 2022 00:56:58 +0000
Gerrit-HasComments: No
[Impala-ASF-CR] IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
Posted by "Joe McDonnell (Code Review)" <ge...@cloudera.org>.
Joe McDonnell has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/18348 )
Change subject: IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
......................................................................
IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
This upgrades pac4j and several of its dependencies
(including xmlsec) to address CVEs in those components.
Specifically:
- pac4j 4.5.5 addresses CVE-2021-44878
- xmlsec 2.2.3 addresses CVE-2021-40690
- bcprov 1.68 addresses CVE-2020-15522
This also upgrade springframework to 5.2.9.RELEASE to
match the version for pac4j 4.5.5.
Testing:
- Ran core job
Change-Id: I8421d867dd0fce8eeaa6bc13a511ca3e8dd05723
Reviewed-on: http://gerrit.cloudera.org:8080/18348
Reviewed-by: Csaba Ringhofer <cs...@cloudera.com>
Tested-by: Joe McDonnell <jo...@cloudera.com>
---
M java/pom.xml
1 file changed, 7 insertions(+), 5 deletions(-)
Approvals:
Csaba Ringhofer: Looks good to me, approved
Joe McDonnell: Verified
--
To view, visit http://gerrit.cloudera.org:8080/18348
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I8421d867dd0fce8eeaa6bc13a511ca3e8dd05723
Gerrit-Change-Number: 18348
Gerrit-PatchSet: 2
Gerrit-Owner: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
[Impala-ASF-CR] IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
Posted by "Joe McDonnell (Code Review)" <ge...@cloudera.org>.
Joe McDonnell has posted comments on this change. ( http://gerrit.cloudera.org:8080/18348 )
Change subject: IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
......................................................................
Patch Set 1: Verified+1
--
To view, visit http://gerrit.cloudera.org:8080/18348
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I8421d867dd0fce8eeaa6bc13a511ca3e8dd05723
Gerrit-Change-Number: 18348
Gerrit-PatchSet: 1
Gerrit-Owner: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Comment-Date: Thu, 24 Mar 2022 15:49:19 +0000
Gerrit-HasComments: No
[Impala-ASF-CR] IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
Posted by "Csaba Ringhofer (Code Review)" <ge...@cloudera.org>.
Csaba Ringhofer has posted comments on this change. ( http://gerrit.cloudera.org:8080/18348 )
Change subject: IMPALA-11197/IMPALA-11149: Address CVEs in pac4j/xmlsec
......................................................................
Patch Set 1: Code-Review+2
--
To view, visit http://gerrit.cloudera.org:8080/18348
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I8421d867dd0fce8eeaa6bc13a511ca3e8dd05723
Gerrit-Change-Number: 18348
Gerrit-PatchSet: 1
Gerrit-Owner: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Comment-Date: Thu, 24 Mar 2022 10:47:48 +0000
Gerrit-HasComments: No