You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@kudu.apache.org by "Abhishek Chennaka (Code Review)" <ge...@cloudera.org> on 2024/12/02 23:21:30 UTC

[kudu-CR](branch-1.18.x) [java] upgrade protobuf from 3.21.12 to 3.25.5

Abhishek Chennaka has uploaded this change for review. ( http://gerrit.cloudera.org:8080/22153


Change subject: [java] upgrade protobuf from 3.21.12 to 3.25.5
......................................................................

[java] upgrade protobuf from 3.21.12 to 3.25.5

This is to address at least CVE-2024-7254 and make security scanners
happier.  More information on the vulnerability is available at [1].

This is to address KUDU-3629, at least partially.

[1] https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8

Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Reviewed-on: http://gerrit.cloudera.org:8080/22137
Reviewed-by: Zoltan Chovan <zc...@cloudera.com>
Tested-by: Alexey Serbin <al...@apache.org>
Reviewed-by: Abhishek Chennaka <ac...@cloudera.com>
(cherry picked from commit 150ec7ff541ec142f378440d8f844d9e9d500876)
---
M java/gradle/dependencies.gradle
1 file changed, 1 insertion(+), 1 deletion(-)



  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/53/22153/1
-- 
To view, visit http://gerrit.cloudera.org:8080/22153
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.18.x
Gerrit-MessageType: newchange
Gerrit-Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Gerrit-Change-Number: 22153
Gerrit-PatchSet: 1
Gerrit-Owner: Abhishek Chennaka <ac...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>

[kudu-CR](branch-1.18.x) [java] upgrade protobuf from 3.21.12 to 3.25.5

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/22153 )

Change subject: [java] upgrade protobuf from 3.21.12 to 3.25.5
......................................................................

[java] upgrade protobuf from 3.21.12 to 3.25.5

This is to address at least CVE-2024-7254 and make security scanners
happier.  More information on the vulnerability is available at [1].

This is to address KUDU-3629, at least partially.

[1] https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8

Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Reviewed-on: http://gerrit.cloudera.org:8080/22137
Reviewed-by: Zoltan Chovan <zc...@cloudera.com>
Tested-by: Alexey Serbin <al...@apache.org>
Reviewed-by: Abhishek Chennaka <ac...@cloudera.com>
(cherry picked from commit 150ec7ff541ec142f378440d8f844d9e9d500876)
Reviewed-on: http://gerrit.cloudera.org:8080/22153
Reviewed-by: Alexey Serbin <al...@apache.org>
---
M java/gradle/dependencies.gradle
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  Alexey Serbin: Looks good to me, approved; Verified

-- 
To view, visit http://gerrit.cloudera.org:8080/22153
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.18.x
Gerrit-MessageType: merged
Gerrit-Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Gerrit-Change-Number: 22153
Gerrit-PatchSet: 2
Gerrit-Owner: Abhishek Chennaka <ac...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)

[kudu-CR](branch-1.18.x) [java] upgrade protobuf from 3.21.12 to 3.25.5

Posted by "Kudu Jenkins (Code Review)" <ge...@cloudera.org>.
Kudu Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/22153 )

Change subject: [java] upgrade protobuf from 3.21.12 to 3.25.5
......................................................................


Patch Set 1: Verified-1

Build Failed 

http://jenkins.kudu.apache.org/job/pre_commit/734/ : FAILURE


-- 
To view, visit http://gerrit.cloudera.org:8080/22153
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.18.x
Gerrit-MessageType: comment
Gerrit-Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Gerrit-Change-Number: 22153
Gerrit-PatchSet: 1
Gerrit-Owner: Abhishek Chennaka <ac...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Tue, 03 Dec 2024 02:29:10 +0000
Gerrit-HasComments: No

[kudu-CR](branch-1.18.x) [java] upgrade protobuf from 3.21.12 to 3.25.5

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has removed a vote on this change.

Change subject: [java] upgrade protobuf from 3.21.12 to 3.25.5
......................................................................


Removed Verified-1 by Kudu Jenkins (120)
-- 
To view, visit http://gerrit.cloudera.org:8080/22153
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.18.x
Gerrit-MessageType: deleteVote
Gerrit-Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Gerrit-Change-Number: 22153
Gerrit-PatchSet: 1
Gerrit-Owner: Abhishek Chennaka <ac...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)

[kudu-CR](branch-1.18.x) [java] upgrade protobuf from 3.21.12 to 3.25.5

Posted by "Kudu Jenkins (Code Review)" <ge...@cloudera.org>.
Kudu Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/22153 )

Change subject: [java] upgrade protobuf from 3.21.12 to 3.25.5
......................................................................


Patch Set 1:

Build Started http://jenkins.kudu.apache.org/job/pre_commit/734/


-- 
To view, visit http://gerrit.cloudera.org:8080/22153
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.18.x
Gerrit-MessageType: comment
Gerrit-Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Gerrit-Change-Number: 22153
Gerrit-PatchSet: 1
Gerrit-Owner: Abhishek Chennaka <ac...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Mon, 02 Dec 2024 23:21:39 +0000
Gerrit-HasComments: No

[kudu-CR](branch-1.18.x) [java] upgrade protobuf from 3.21.12 to 3.25.5

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has posted comments on this change. ( http://gerrit.cloudera.org:8080/22153 )

Change subject: [java] upgrade protobuf from 3.21.12 to 3.25.5
......................................................................


Patch Set 1: Verified+1

unrelated test failure (TSAN)


-- 
To view, visit http://gerrit.cloudera.org:8080/22153
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.18.x
Gerrit-MessageType: comment
Gerrit-Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Gerrit-Change-Number: 22153
Gerrit-PatchSet: 1
Gerrit-Owner: Abhishek Chennaka <ac...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Tue, 03 Dec 2024 03:13:47 +0000
Gerrit-HasComments: No

[kudu-CR](branch-1.18.x) [java] upgrade protobuf from 3.21.12 to 3.25.5

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has posted comments on this change. ( http://gerrit.cloudera.org:8080/22153 )

Change subject: [java] upgrade protobuf from 3.21.12 to 3.25.5
......................................................................


Patch Set 1: Code-Review+2


-- 
To view, visit http://gerrit.cloudera.org:8080/22153
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.18.x
Gerrit-MessageType: comment
Gerrit-Change-Id: I65012cc999d30cee3bb8389b3b94945d4992c11d
Gerrit-Change-Number: 22153
Gerrit-PatchSet: 1
Gerrit-Owner: Abhishek Chennaka <ac...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Tue, 03 Dec 2024 00:41:52 +0000
Gerrit-HasComments: No