You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by st...@apache.org on 2022/07/21 13:45:29 UTC
svn commit: r55883 [1/3] - /dev/hadoop/hadoop-3.3.4-0/
Author: stevel
Date: Thu Jul 21 13:45:28 2022
New Revision: 55883
Log:
stage 3.3.4 RC0
Added:
dev/hadoop/hadoop-3.3.4-0/
dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md
dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc
dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512
dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md
dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc
dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-rat.txt
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-rat.txt.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-rat.txt.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-site.tar.gz (with props)
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-site.tar.gz.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-site.tar.gz.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-src.tar.gz (with props)
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-src.tar.gz.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-src.tar.gz.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4.tar.gz (with props)
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4.tar.gz.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4.tar.gz.sha512
Added: dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md (added)
+++ dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md Thu Jul 21 13:45:28 2022
@@ -0,0 +1,53 @@
+
+<!---
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+-->
+# Apache Hadoop Changelog
+
+## Release 3.3.4 - 2022-07-19
+
+
+
+### IMPROVEMENTS:
+
+| JIRA | Summary | Priority | Component | Reporter | Contributor |
+|:---- |:---- | :--- |:---- |:---- |:---- |
+| [HADOOP-18044](https://issues.apache.org/jira/browse/HADOOP-18044) | Hadoop - Upgrade to JQuery 3.6.0 | Major | . | Yuan Luo | Yuan Luo |
+| [YARN-11195](https://issues.apache.org/jira/browse/YARN-11195) | Document how to configure NUMA in YARN | Major | documentation | Prabhu Joseph | Samrat Deb |
+| [HADOOP-18332](https://issues.apache.org/jira/browse/HADOOP-18332) | remove rs-api dependency by downgrading jackson to 2.12.7 | Major | build | PJ Fanning | PJ Fanning |
+
+
+### BUG FIXES:
+
+| JIRA | Summary | Priority | Component | Reporter | Contributor |
+|:---- |:---- | :--- |:---- |:---- |:---- |
+| [HADOOP-18085](https://issues.apache.org/jira/browse/HADOOP-18085) | S3 SDK Upgrade causes AccessPoint ARN endpoint mistranslation | Major | fs/s3, test | Bogdan Stolojan | Bogdan Stolojan |
+| [YARN-11092](https://issues.apache.org/jira/browse/YARN-11092) | Upgrade jquery ui to 1.13.1 | Major | . | D M Murali Krishna Reddy | groot |
+| [HDFS-16453](https://issues.apache.org/jira/browse/HDFS-16453) | Upgrade okhttp from 2.7.5 to 4.9.3 | Major | hdfs-client | Ivan Viaznikov | groot |
+| [YARN-10974](https://issues.apache.org/jira/browse/YARN-10974) | CS UI: queue filter and openQueues param do not work as expected | Major | capacity scheduler | Chengbing Liu | Chengbing Liu |
+| [HADOOP-18237](https://issues.apache.org/jira/browse/HADOOP-18237) | Upgrade Apache Xerces Java to 2.12.2 | Major | build | groot | groot |
+| [HADOOP-18074](https://issues.apache.org/jira/browse/HADOOP-18074) | Partial/Incomplete groups list can be returned in LDAP groups lookup | Major | security | Philippe Lanoe | Larry McCay |
+
+
+### SUB-TASKS:
+
+| JIRA | Summary | Priority | Component | Reporter | Contributor |
+|:---- |:---- | :--- |:---- |:---- |:---- |
+| [HADOOP-18068](https://issues.apache.org/jira/browse/HADOOP-18068) | upgrade AWS SDK to 1.12.132 | Major | build, fs/s3 | Steve Loughran | Steve Loughran |
+| [HADOOP-18307](https://issues.apache.org/jira/browse/HADOOP-18307) | remove hadoop-cos as a dependency of hadoop-cloud-storage | Major | bulid, fs | Steve Loughran | Steve Loughran |
+
+
Added: dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc (added)
+++ dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc Thu Jul 21 13:45:28 2022
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=323D
+-----END PGP SIGNATURE-----
Added: dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512 (added)
+++ dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512 Thu Jul 21 13:45:28 2022
@@ -0,0 +1 @@
+SHA512 (CHANGELOG.md) = b3217895144f9c031bf5d6ed4a0057966c13a01db143732108777768a52ad65fc57b291373dd32088b6098a544d507cccd269fb243db16b0e003dfc328d54fc3
Added: dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md (added)
+++ dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md Thu Jul 21 13:45:28 2022
@@ -0,0 +1,59 @@
+
+<!---
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+-->
+# Apache Hadoop 3.3.4 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HADOOP-18068](https://issues.apache.org/jira/browse/HADOOP-18068) | *Major* | **upgrade AWS SDK to 1.12.132**
+
+The AWS SDK bundle JAR has been upgraded to 1.12.132; other than a test failure this has proven stable. The versions of key shaded dependencies are: jackson @ 2.12.3 and httpclient@4.5.13. Although 1.11.x SDK bundles include a jackson version with known CVEs, the uses made of it by the AWS client are not believed to be vulnerable.
+
+
+---
+
+* [HDFS-16453](https://issues.apache.org/jira/browse/HDFS-16453) | *Major* | **Upgrade okhttp from 2.7.5 to 4.9.3**
+
+okhttp has been updated to address CVE-2021-0341
+
+
+---
+
+* [HADOOP-18237](https://issues.apache.org/jira/browse/HADOOP-18237) | *Major* | **Upgrade Apache Xerces Java to 2.12.2**
+
+Apache Xerces has been updated to 2.12.2 to fix CVE-2022-23437
+
+
+---
+
+* [HADOOP-18307](https://issues.apache.org/jira/browse/HADOOP-18307) | *Major* | **remove hadoop-cos as a dependency of hadoop-cloud-storage**
+
+We have recently become aware that libraries which include a shaded apache httpclient libraries (hadoop-client-runtime.jar, aws-java-sdk-bundle.jar, gcs-connector-shaded.jar, cos\_api-bundle-5.6.19.jar) all load and use the unshaded resource mozilla/public-suffix-list.txt. If an out of date version of this is found on the classpath first, attempts to negotiate TLS connections may fail with the error "Certificate doesn't match any of the subject alternative names". This release does not declare the hadoop-cos library to be a dependency of the hadoop-cloud-storage POM, so applications depending on that module are no longer exposed to this issue. If an application requires use of the hadoop-cos module, please declare an explicit dependency.
+
+
+---
+
+* [HADOOP-18332](https://issues.apache.org/jira/browse/HADOOP-18332) | *Major* | **remove rs-api dependency by downgrading jackson to 2.12.7**
+
+Downgrades Jackson from 2.13.2 to 2.12.7 to fix class conflicts in downstream projects. This version of jackson does contain the fix for CVE-2020-36518.
+
+
+
Added: dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc (added)
+++ dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc Thu Jul 21 13:45:28 2022
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=qMsM
+-----END PGP SIGNATURE-----
Added: dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512 (added)
+++ dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512 Thu Jul 21 13:45:28 2022
@@ -0,0 +1 @@
+SHA512 (RELEASENOTES.md) = 9e91590c59481e9c9ba3773a929071183af12279232680292f8ed7dade4aaa004458644808ef6dcac3c853af7bcc2afe098f28f13217b8a5a08bef359db05784
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org