You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by GitBox <gi...@apache.org> on 2021/03/24 22:43:17 UTC
[GitHub] [druid] jihoonson opened a new issue #11029: Bump Aliyun OSS Java SDK version
jihoonson opened a new issue #11029:
URL: https://github.com/apache/druid/issues/11029
We are currently using 3.3.0 which has a dependency on `jersey-json-1.9` which in turn uses `jackson-xc-1.9.x` and `jackson-jaxrs-1.9.x`. These `jackson-xc-1.9.x` and `jackson-jaxrs-1.9.x` has a known security vulnerabilities reported in CVE-2018-14718 and CVE-2018-7489. The latest version (3.11.3) seem no longer using `jersey-json-1.9`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] jihoonson closed issue #11029: Bump Aliyun OSS Java SDK version
Posted by GitBox <gi...@apache.org>.
jihoonson closed issue #11029:
URL: https://github.com/apache/druid/issues/11029
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] jihoonson commented on issue #11029: Bump Aliyun OSS Java SDK version
Posted by GitBox <gi...@apache.org>.
jihoonson commented on issue #11029:
URL: https://github.com/apache/druid/issues/11029#issuecomment-806245988
@FrankChen021 It sounds good to me. Thank you!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] FrankChen021 commented on issue #11029: Bump Aliyun OSS Java SDK version
Posted by GitBox <gi...@apache.org>.
FrankChen021 commented on issue #11029:
URL: https://github.com/apache/druid/issues/11029#issuecomment-806317345
I checked the latest version 3.11.3, it indeed has no dependency on jersey-json. I will test if the latest version works when I'm free :)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] FrankChen021 commented on issue #11029: Bump Aliyun OSS Java SDK version
Posted by GitBox <gi...@apache.org>.
FrankChen021 commented on issue #11029:
URL: https://github.com/apache/druid/issues/11029#issuecomment-806245725
I will test it before March 31, is that OK?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] jihoonson commented on issue #11029: Bump Aliyun OSS Java SDK version
Posted by GitBox <gi...@apache.org>.
jihoonson commented on issue #11029:
URL: https://github.com/apache/druid/issues/11029#issuecomment-806231993
@FrankChen021 could you please test the druid extension against the latest sdk version?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org