hbase icon indicating copy to clipboard operation
hbase copied to clipboard

HBASE-28486 fix CVE-2024-29025 in netty package

Open nikita15p opened this issue 1 year ago • 9 comments

nikita15p avatar Apr 05 '24 05:04 nikita15p

:confetti_ball: +1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 39s Docker mode activated.
_ Prechecks _
+1 :green_heart: dupname 0m 0s No case conflicting files found.
+1 :green_heart: @author 0m 0s The patch does not contain any @author tags.
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 4s master passed
+1 :green_heart: compile 5m 7s master passed
+1 :green_heart: spotless 0m 43s branch has no errors when running spotless:check.
_ Patch Compile Tests _
+1 :green_heart: mvninstall 2m 48s the patch passed
+1 :green_heart: compile 4m 57s the patch passed
+1 :green_heart: javac 4m 57s the patch passed
+1 :green_heart: whitespace 0m 0s The patch has no whitespace issues.
+1 :green_heart: xml 0m 1s The patch has no ill-formed XML file.
+1 :green_heart: hadoopcheck 4m 53s Patch does not cause any errors with Hadoop 3.3.6.
+1 :green_heart: spotless 0m 42s patch has no errors when running spotless:check.
_ Other Tests _
+1 :green_heart: asflicense 0m 14s The patch does not generate ASF License warnings.
29m 12s
Subsystem Report/Notes
Docker ClientAPI=1.45 ServerAPI=1.45 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/artifact/yetus-general-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests dupname asflicense javac hadoopcheck spotless xml compile
uname Linux 03069acadbc9 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / 6101bad5a3
Default Java Eclipse Adoptium-11.0.17+8
Max. process+thread count 79 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 06:04 Apache-HBase

:broken_heart: -1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 13s Docker mode activated.
-0 :warning: yetus 0m 3s Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 4s master passed
+1 :green_heart: compile 2m 4s master passed
+1 :green_heart: shadedjars 5m 14s branch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 2m 3s master passed
_ Patch Compile Tests _
+1 :green_heart: mvninstall 2m 49s the patch passed
+1 :green_heart: compile 2m 7s the patch passed
+1 :green_heart: javac 2m 7s the patch passed
+1 :green_heart: shadedjars 5m 11s patch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 2m 1s the patch passed
_ Other Tests _
-1 :x: unit 243m 49s root in the patch failed.
273m 57s
Subsystem Report/Notes
Docker ClientAPI=1.45 ServerAPI=1.45 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/artifact/yetus-jdk17-hadoop3-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests javac javadoc unit shadedjars compile
uname Linux 91ecce2b27f8 5.4.0-172-generic #190-Ubuntu SMP Fri Feb 2 23:24:22 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / 6101bad5a3
Default Java Eclipse Adoptium-17.0.10+7
unit https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/artifact/yetus-jdk17-hadoop3-check/output/patch-unit-root.txt
Test Results https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/testReport/
Max. process+thread count 6398 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 10:04 Apache-HBase

:confetti_ball: +1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 31s Docker mode activated.
-0 :warning: yetus 0m 4s Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 12s master passed
+1 :green_heart: compile 1m 56s master passed
+1 :green_heart: shadedjars 5m 37s branch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 1m 55s master passed
_ Patch Compile Tests _
+1 :green_heart: mvninstall 2m 44s the patch passed
+1 :green_heart: compile 1m 55s the patch passed
+1 :green_heart: javac 1m 55s the patch passed
+1 :green_heart: shadedjars 5m 34s patch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 1m 46s the patch passed
_ Other Tests _
+1 :green_heart: unit 311m 35s root in the patch passed.
343m 26s
Subsystem Report/Notes
Docker ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests javac javadoc unit shadedjars compile
uname Linux 1ad50ed4cbdc 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / 6101bad5a3
Default Java Eclipse Adoptium-11.0.17+8
Test Results https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/testReport/
Max. process+thread count 8651 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 11:04 Apache-HBase

Actually this fix is not enough.

This is just for netty dependency introduced transitively by other dependencies, in hbase we use the relocated netty in hbase-thirdparty. We need to make a new hbase-thirdparty first.

Apache9 avatar Apr 05 '24 12:04 Apache9

:broken_heart: -1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 47s Docker mode activated.
-0 :warning: yetus 0m 3s Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 56s master passed
+1 :green_heart: compile 2m 40s master passed
+1 :green_heart: shadedjars 8m 9s branch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 2m 42s master passed
_ Patch Compile Tests _
+1 :green_heart: mvninstall 3m 43s the patch passed
+1 :green_heart: compile 2m 32s the patch passed
+1 :green_heart: javac 2m 32s the patch passed
+1 :green_heart: shadedjars 7m 47s patch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 2m 16s the patch passed
_ Other Tests _
-1 :x: unit 385m 10s root in the patch failed.
425m 19s
Subsystem Report/Notes
Docker ClientAPI=1.45 ServerAPI=1.45 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/artifact/yetus-jdk8-hadoop3-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests javac javadoc unit shadedjars compile
uname Linux d026ea7e2b0b 5.4.0-172-generic #190-Ubuntu SMP Fri Feb 2 23:24:22 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / 6101bad5a3
Default Java Temurin-1.8.0_352-b08
unit https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/artifact/yetus-jdk8-hadoop3-check/output/patch-unit-root.txt
Test Results https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/testReport/
Max. process+thread count 5340 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/1/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 12:04 Apache-HBase

:confetti_ball: +1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 12s Docker mode activated.
_ Prechecks _
+1 :green_heart: dupname 0m 0s No case conflicting files found.
+1 :green_heart: @author 0m 0s The patch does not contain any @author tags.
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 2s master passed
+1 :green_heart: compile 5m 10s master passed
+1 :green_heart: spotless 1m 12s branch has no errors when running spotless:check.
_ Patch Compile Tests _
+1 :green_heart: mvninstall 3m 38s the patch passed
+1 :green_heart: compile 5m 45s the patch passed
+1 :green_heart: javac 5m 45s the patch passed
+1 :green_heart: whitespace 0m 0s The patch has no whitespace issues.
+1 :green_heart: xml 0m 1s The patch has no ill-formed XML file.
+1 :green_heart: hadoopcheck 4m 52s Patch does not cause any errors with Hadoop 3.3.6.
+1 :green_heart: spotless 0m 42s patch has no errors when running spotless:check.
_ Other Tests _
+1 :green_heart: asflicense 0m 13s The patch does not generate ASF License warnings.
31m 2s
Subsystem Report/Notes
Docker ClientAPI=1.45 ServerAPI=1.45 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/artifact/yetus-general-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests dupname asflicense javac hadoopcheck spotless xml compile
uname Linux 427025b817ae 5.4.0-172-generic #190-Ubuntu SMP Fri Feb 2 23:24:22 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / aea7e7c85c
Default Java Eclipse Adoptium-11.0.17+8
Max. process+thread count 79 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 13:04 Apache-HBase

:confetti_ball: +1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 28s Docker mode activated.
-0 :warning: yetus 0m 3s Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 8s master passed
+1 :green_heart: compile 2m 3s master passed
+1 :green_heart: shadedjars 5m 32s branch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 1m 51s master passed
_ Patch Compile Tests _
+1 :green_heart: mvninstall 2m 46s the patch passed
+1 :green_heart: compile 1m 58s the patch passed
+1 :green_heart: javac 1m 58s the patch passed
+1 :green_heart: shadedjars 5m 29s patch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 1m 50s the patch passed
_ Other Tests _
+1 :green_heart: unit 264m 0s root in the patch passed.
295m 51s
Subsystem Report/Notes
Docker ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/artifact/yetus-jdk17-hadoop3-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests javac javadoc unit shadedjars compile
uname Linux 2f4fead1a528 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / aea7e7c85c
Default Java Eclipse Adoptium-17.0.10+7
Test Results https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/testReport/
Max. process+thread count 8436 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 17:04 Apache-HBase

:confetti_ball: +1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 29s Docker mode activated.
-0 :warning: yetus 0m 4s Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 22s master passed
+1 :green_heart: compile 2m 5s master passed
+1 :green_heart: shadedjars 5m 55s branch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 1m 51s master passed
_ Patch Compile Tests _
+1 :green_heart: mvninstall 3m 1s the patch passed
+1 :green_heart: compile 2m 1s the patch passed
+1 :green_heart: javac 2m 1s the patch passed
+1 :green_heart: shadedjars 5m 59s patch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 1m 51s the patch passed
_ Other Tests _
+1 :green_heart: unit 290m 1s root in the patch passed.
322m 38s
Subsystem Report/Notes
Docker ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests javac javadoc unit shadedjars compile
uname Linux 21c4bab1a74f 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / aea7e7c85c
Default Java Eclipse Adoptium-11.0.17+8
Test Results https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/testReport/
Max. process+thread count 8857 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 18:04 Apache-HBase

:broken_heart: -1 overall

Vote Subsystem Runtime Comment
+0 :ok: reexec 0m 49s Docker mode activated.
-0 :warning: yetus 0m 2s Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
+1 :green_heart: mvninstall 3m 29s master passed
+1 :green_heart: compile 2m 20s master passed
+1 :green_heart: shadedjars 6m 53s branch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 2m 12s master passed
_ Patch Compile Tests _
+1 :green_heart: mvninstall 3m 10s the patch passed
+1 :green_heart: compile 2m 26s the patch passed
+1 :green_heart: javac 2m 26s the patch passed
+1 :green_heart: shadedjars 6m 23s patch has no errors when building our shaded downstream artifacts.
+1 :green_heart: javadoc 1m 45s the patch passed
_ Other Tests _
-1 :x: unit 417m 1s root in the patch failed.
452m 29s
Subsystem Report/Notes
Docker ClientAPI=1.45 ServerAPI=1.45 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/artifact/yetus-jdk8-hadoop3-check/output/Dockerfile
GITHUB PR https://github.com/apache/hbase/pull/5794
Optional Tests javac javadoc unit shadedjars compile
uname Linux 27eb633b5de6 5.4.0-172-generic #190-Ubuntu SMP Fri Feb 2 23:24:22 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/hbase-personality.sh
git revision master / aea7e7c85c
Default Java Temurin-1.8.0_352-b08
unit https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/artifact/yetus-jdk8-hadoop3-check/output/patch-unit-root.txt
Test Results https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/testReport/
Max. process+thread count 5548 (vs. ulimit of 30000)
modules C: . U: .
Console output https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5794/2/console
versions git=2.34.1 maven=3.8.6
Powered by Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase avatar Apr 05 '24 20:04 Apache-HBase

With hbase-thirdparty updated to 4.1.7 and PR has upticked io.netty version, this PR can be closed. @Apache9

nikita15p avatar Jul 10 '24 11:07 nikita15p

Thanks @nikita15p for the reminding!

Apache9 avatar Jul 10 '24 14:07 Apache9