You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kylin.apache.org by kangkaisen <ka...@apache.org> on 2018/06/27 07:15:38 UTC
[VOTE] Release apache-kylin-2.3.2 (RC2)
Hi all,
I have created a build for Apache Kylin 2.3.2, release candidate 2.
Changes highlights:
[KYLIN-3372] - Upgrade jackson-databind version due to security concerns
[KYLIN-3388] - Data may become not correct if mappers fail during the
redistribute step, "distribute by rand()"
[KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
[KYLIN-3401] - The current using zip compress tool has an arbitrary file
write vulnerability
Thanks to everyone who has contributed to this release.
Here are release notes:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12343423&projectId=12316121
The commit to being voted upon:
https://github.com/apache/kylin/commit/8247ffc2d8a8a20381575389ffb3834d784ad4ce
Its hash is 8247ffc2d8a8a20381575389ffb3834d784ad4ce.
The artifacts to be voted on are located here:
https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc2/
The hashes of the artifacts are as follows:
apache-kylin-2.3.2-source-release.zip.md5 f7b3ed50ef0273606b80fef1ee37ee9d
apache-kylin-2.3.2-source-release.zip.sha1
71429dba824e514ec9b43111a2fc40bccab53cfb
A staged Maven repository is available for review at:
https://repository.apache.org/content/repositories/orgapachekylin-1052/
Release artifacts are signed with the following key:
https://people.apache.org/keys/committer/kangkaisen.asc
Please vote on releasing this package as Apache Kylin 2.3.2.
The vote is open for the next 72 hours and passes if a majority of
at least three +1 PPMC votes are cast.
[ ] +1 Release this package as Apache Kylin 2.3.2
[ ] 0 I don't feel strongly about it, but I'm okay with the release
[ ] -1 Do not release this package because...
Here is my vote:
+1
--
Best regards,
KaiSen Kang 康凯森
--
Sent from: http://apache-kylin.74782.x6.nabble.com/
Re: [VOTE] Release apache-kylin-2.3.2 (RC2)
Posted by Yerui Sun <su...@gmail.com>.
+1 binding
2018-06-27 15:45 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
> Verified the signature, md5 hash;
> `mvn clean package` got success on Java 1.8.0_111 64-bit with MacOS 10.12.6
>
> +1 (binding)
>
>
> 2018-06-27 15:15 GMT+08:00 kangkaisen <ka...@apache.org>:
>
>> Hi all,
>>
>> I have created a build for Apache Kylin 2.3.2, release candidate 2.
>>
>> Changes highlights:
>> [KYLIN-3372] - Upgrade jackson-databind version due to security concerns
>> [KYLIN-3388] - Data may become not correct if mappers fail during the
>> redistribute step, "distribute by rand()"
>> [KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
>> [KYLIN-3401] - The current using zip compress tool has an arbitrary file
>> write vulnerability
>>
>>
>> Thanks to everyone who has contributed to this release.
>> Here are release notes:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?
>> version=12343423&projectId=12316121
>>
>> The commit to being voted upon:
>>
>> https://github.com/apache/kylin/commit/8247ffc2d8a8a20381575389ffb383
>> 4d784ad4ce
>>
>> Its hash is 8247ffc2d8a8a20381575389ffb3834d784ad4ce.
>>
>> The artifacts to be voted on are located here:
>> https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc2/
>>
>> The hashes of the artifacts are as follows:
>> apache-kylin-2.3.2-source-release.zip.md5 f7b3ed50ef0273606b80fef1ee37ee9d
>> apache-kylin-2.3.2-source-release.zip.sha1
>> 71429dba824e514ec9b43111a2fc40bccab53cfb
>>
>> A staged Maven repository is available for review at:
>> https://repository.apache.org/content/repositories/orgapachekylin-1052/
>>
>> Release artifacts are signed with the following key:
>> https://people.apache.org/keys/committer/kangkaisen.asc
>>
>> Please vote on releasing this package as Apache Kylin 2.3.2.
>>
>> The vote is open for the next 72 hours and passes if a majority of
>> at least three +1 PPMC votes are cast.
>>
>> [ ] +1 Release this package as Apache Kylin 2.3.2
>> [ ] 0 I don't feel strongly about it, but I'm okay with the release
>> [ ] -1 Do not release this package because...
>>
>>
>> Here is my vote:
>>
>> +1
>>
>> --
>> Best regards,
>>
>> KaiSen Kang 康凯森
>>
>> --
>> Sent from: http://apache-kylin.74782.x6.nabble.com/
>>
>
>
>
> --
> Best regards,
>
> Shaofeng Shi 史少锋
Re: [VOTE] Release apache-kylin-2.3.2 (RC2)
Posted by ShaoFeng Shi <sh...@apache.org>.
Verified the signature, md5 hash;
`mvn clean package` got success on Java 1.8.0_111 64-bit with MacOS 10.12.6
+1 (binding)
2018-06-27 15:15 GMT+08:00 kangkaisen <ka...@apache.org>:
> Hi all,
>
> I have created a build for Apache Kylin 2.3.2, release candidate 2.
>
> Changes highlights:
> [KYLIN-3372] - Upgrade jackson-databind version due to security concerns
> [KYLIN-3388] - Data may become not correct if mappers fail during the
> redistribute step, "distribute by rand()"
> [KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
> [KYLIN-3401] - The current using zip compress tool has an arbitrary file
> write vulnerability
>
>
> Thanks to everyone who has contributed to this release.
> Here are release notes:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?
> version=12343423&projectId=12316121
>
> The commit to being voted upon:
>
> https://github.com/apache/kylin/commit/8247ffc2d8a8a20381575389ffb383
> 4d784ad4ce
>
> Its hash is 8247ffc2d8a8a20381575389ffb3834d784ad4ce.
>
> The artifacts to be voted on are located here:
> https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc2/
>
> The hashes of the artifacts are as follows:
> apache-kylin-2.3.2-source-release.zip.md5 f7b3ed50ef0273606b80fef1ee37ee9d
> apache-kylin-2.3.2-source-release.zip.sha1
> 71429dba824e514ec9b43111a2fc40bccab53cfb
>
> A staged Maven repository is available for review at:
> https://repository.apache.org/content/repositories/orgapachekylin-1052/
>
> Release artifacts are signed with the following key:
> https://people.apache.org/keys/committer/kangkaisen.asc
>
> Please vote on releasing this package as Apache Kylin 2.3.2.
>
> The vote is open for the next 72 hours and passes if a majority of
> at least three +1 PPMC votes are cast.
>
> [ ] +1 Release this package as Apache Kylin 2.3.2
> [ ] 0 I don't feel strongly about it, but I'm okay with the release
> [ ] -1 Do not release this package because...
>
>
> Here is my vote:
>
> +1
>
> --
> Best regards,
>
> KaiSen Kang 康凯森
>
> --
> Sent from: http://apache-kylin.74782.x6.nabble.com/
>
--
Best regards,
Shaofeng Shi 史少锋
RE: [VOTE] Release apache-kylin-2.3.2 (RC2)
Posted by 李 栋 <zk...@hotmail.com>.
+1 binding
mvn test passed
Apache Maven 3.2.5 (12a6b3acb947671f09b81f49094c53f426d8cea1; 2014-12-14T17:29:23+00:00)
Maven home: /opt/apache-maven-3.2.5
Java version: 1.8.0_161, vendor: Oracle Corporation
Java home: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.161-3.b14.el6_9.x86_64/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "2.6.32-573.18.1.el6.x86_64", arch: "amd64", family: "unix"
Thanks,
Dong Li
-----Original Message-----
From: Billy Liu <bi...@apache.org>
Sent: Thursday, June 28, 2018 2:56 PM
To: dev <de...@kylin.apache.org>
Subject: Re: [VOTE] Release apache-kylin-2.3.2 (RC2)
+1 binding
mvn test passed
verified signature and md5 hash
Apache Maven 3.3.9 (bb52d8502b132ec0a5a3f4c09453c07478323dc5;
2015-11-11T00:41:47+08:00)
Maven home: /usr/local/Cellar/maven/3.3.9/libexec
Java version: 1.8.0_91, vendor: Oracle Corporation Java home: /Library/Java/JavaVirtualMachines/jdk1.8.0_91.jdk/Contents/Home/jre
Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "10.13.5", arch: "x86_64", family: "mac"
With Warm regards
Billy Liu
Dayue Gao <dy...@gmail.com> 于2018年6月27日周三 下午6:45写道：
>
> +1 (binding)
>
> verified signature and md5 hash.
> `mvn clean package` passed on java version "1.8.0_40" 64-bit with
> MacOS 10.12.6.
>
> kangkaisen <ka...@apache.org> 于2018年6月27日周三 下午3:15写道：
>
> > Hi all,
> >
> > I have created a build for Apache Kylin 2.3.2, release candidate 2.
> >
> > Changes highlights:
> > [KYLIN-3372] - Upgrade jackson-databind version due to security
> > concerns [KYLIN-3388] - Data may become not correct if mappers fail
> > during the redistribute step, "distribute by rand()"
> > [KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
> > [KYLIN-3401] - The current using zip compress tool has an arbitrary
> > file write vulnerability
> >
> >
> > Thanks to everyone who has contributed to this release.
> > Here are release notes:
> >
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12343
> > 423&projectId=12316121
> >
> > The commit to being voted upon:
> >
> >
> > https://github.com/apache/kylin/commit/8247ffc2d8a8a20381575389ffb38
> > 34d784ad4ce
> >
> > Its hash is 8247ffc2d8a8a20381575389ffb3834d784ad4ce.
> >
> > The artifacts to be voted on are located here:
> > https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc2/
> >
> > The hashes of the artifacts are as follows:
> > apache-kylin-2.3.2-source-release.zip.md5
> > f7b3ed50ef0273606b80fef1ee37ee9d
> > apache-kylin-2.3.2-source-release.zip.sha1
> > 71429dba824e514ec9b43111a2fc40bccab53cfb
> >
> > A staged Maven repository is available for review at:
> > https://repository.apache.org/content/repositories/orgapachekylin-10
> > 52/
> >
> > Release artifacts are signed with the following key:
> > https://people.apache.org/keys/committer/kangkaisen.asc
> >
> > Please vote on releasing this package as Apache Kylin 2.3.2.
> >
> > The vote is open for the next 72 hours and passes if a majority of
> > at least three +1 PPMC votes are cast.
> >
> > [ ] +1 Release this package as Apache Kylin 2.3.2 [ ] 0 I don't
> > feel strongly about it, but I'm okay with the release [ ] -1 Do not
> > release this package because...
> >
> >
> > Here is my vote:
> >
> > +1
> >
> > --
> > Best regards,
> >
> > KaiSen Kang 康凯森
> >
> > --
> > Sent from: http://apache-kylin.74782.x6.nabble.com/
> >
Re: [VOTE] Release apache-kylin-2.3.2 (RC2)
Posted by Billy Liu <bi...@apache.org>.
+1 binding
mvn test passed
verified signature and md5 hash
Apache Maven 3.3.9 (bb52d8502b132ec0a5a3f4c09453c07478323dc5;
2015-11-11T00:41:47+08:00)
Maven home: /usr/local/Cellar/maven/3.3.9/libexec
Java version: 1.8.0_91, vendor: Oracle Corporation
Java home: /Library/Java/JavaVirtualMachines/jdk1.8.0_91.jdk/Contents/Home/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "10.13.5", arch: "x86_64", family: "mac"
With Warm regards
Billy Liu
Dayue Gao <dy...@gmail.com> 于2018年6月27日周三 下午6:45写道：
>
> +1 (binding)
>
> verified signature and md5 hash.
> `mvn clean package` passed on java version "1.8.0_40" 64-bit with MacOS
> 10.12.6.
>
> kangkaisen <ka...@apache.org> 于2018年6月27日周三 下午3:15写道：
>
> > Hi all,
> >
> > I have created a build for Apache Kylin 2.3.2, release candidate 2.
> >
> > Changes highlights:
> > [KYLIN-3372] - Upgrade jackson-databind version due to security concerns
> > [KYLIN-3388] - Data may become not correct if mappers fail during the
> > redistribute step, "distribute by rand()"
> > [KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
> > [KYLIN-3401] - The current using zip compress tool has an arbitrary file
> > write vulnerability
> >
> >
> > Thanks to everyone who has contributed to this release.
> > Here are release notes:
> >
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12343423&projectId=12316121
> >
> > The commit to being voted upon:
> >
> >
> > https://github.com/apache/kylin/commit/8247ffc2d8a8a20381575389ffb3834d784ad4ce
> >
> > Its hash is 8247ffc2d8a8a20381575389ffb3834d784ad4ce.
> >
> > The artifacts to be voted on are located here:
> > https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc2/
> >
> > The hashes of the artifacts are as follows:
> > apache-kylin-2.3.2-source-release.zip.md5 f7b3ed50ef0273606b80fef1ee37ee9d
> > apache-kylin-2.3.2-source-release.zip.sha1
> > 71429dba824e514ec9b43111a2fc40bccab53cfb
> >
> > A staged Maven repository is available for review at:
> > https://repository.apache.org/content/repositories/orgapachekylin-1052/
> >
> > Release artifacts are signed with the following key:
> > https://people.apache.org/keys/committer/kangkaisen.asc
> >
> > Please vote on releasing this package as Apache Kylin 2.3.2.
> >
> > The vote is open for the next 72 hours and passes if a majority of
> > at least three +1 PPMC votes are cast.
> >
> > [ ] +1 Release this package as Apache Kylin 2.3.2
> > [ ] 0 I don't feel strongly about it, but I'm okay with the release
> > [ ] -1 Do not release this package because...
> >
> >
> > Here is my vote:
> >
> > +1
> >
> > --
> > Best regards,
> >
> > KaiSen Kang 康凯森
> >
> > --
> > Sent from: http://apache-kylin.74782.x6.nabble.com/
> >
Re: [VOTE] Release apache-kylin-2.3.2 (RC2)
Posted by Dayue Gao <dy...@gmail.com>.
+1 (binding)
verified signature and md5 hash.
`mvn clean package` passed on java version "1.8.0_40" 64-bit with MacOS
10.12.6.
kangkaisen <ka...@apache.org> 于2018年6月27日周三 下午3:15写道：
> Hi all,
>
> I have created a build for Apache Kylin 2.3.2, release candidate 2.
>
> Changes highlights:
> [KYLIN-3372] - Upgrade jackson-databind version due to security concerns
> [KYLIN-3388] - Data may become not correct if mappers fail during the
> redistribute step, "distribute by rand()"
> [KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
> [KYLIN-3401] - The current using zip compress tool has an arbitrary file
> write vulnerability
>
>
> Thanks to everyone who has contributed to this release.
> Here are release notes:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12343423&projectId=12316121
>
> The commit to being voted upon:
>
>
> https://github.com/apache/kylin/commit/8247ffc2d8a8a20381575389ffb3834d784ad4ce
>
> Its hash is 8247ffc2d8a8a20381575389ffb3834d784ad4ce.
>
> The artifacts to be voted on are located here:
> https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc2/
>
> The hashes of the artifacts are as follows:
> apache-kylin-2.3.2-source-release.zip.md5 f7b3ed50ef0273606b80fef1ee37ee9d
> apache-kylin-2.3.2-source-release.zip.sha1
> 71429dba824e514ec9b43111a2fc40bccab53cfb
>
> A staged Maven repository is available for review at:
> https://repository.apache.org/content/repositories/orgapachekylin-1052/
>
> Release artifacts are signed with the following key:
> https://people.apache.org/keys/committer/kangkaisen.asc
>
> Please vote on releasing this package as Apache Kylin 2.3.2.
>
> The vote is open for the next 72 hours and passes if a majority of
> at least three +1 PPMC votes are cast.
>
> [ ] +1 Release this package as Apache Kylin 2.3.2
> [ ] 0 I don't feel strongly about it, but I'm okay with the release
> [ ] -1 Do not release this package because...
>
>
> Here is my vote:
>
> +1
>
> --
> Best regards,
>
> KaiSen Kang 康凯森
>
> --
> Sent from: http://apache-kylin.74782.x6.nabble.com/
>