Author: stevel
Date: Thu Jul 21 13:45:28 2022
New Revision: 55883
Log:
stage 3.3.4 RC0
Added:
dev/hadoop/hadoop-3.3.4-0/
dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md
dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc
dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512
dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md
dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc
dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-rat.txt
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-rat.txt.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-rat.txt.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-site.tar.gz (with props)
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-site.tar.gz.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-site.tar.gz.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-src.tar.gz (with props)
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-src.tar.gz.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4-src.tar.gz.sha512
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4.tar.gz (with props)
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4.tar.gz.asc
dev/hadoop/hadoop-3.3.4-0/hadoop-3.3.4.tar.gz.sha512
Added: dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md (added)
+++ dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md Thu Jul 21 13:45:28 2022
@@ -0,0 +1,53 @@
+
+<!---
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+-->
+# Apache Hadoop Changelog
+
+## Release 3.3.4 - 2022-07-19
+
+
+
+### IMPROVEMENTS:
+
+| JIRA | Summary | Priority | Component | Reporter | Contributor |
+|:---- |:---- | :--- |:---- |:---- |:---- |
+| [HADOOP-18044](https://issues.apache.org/jira/browse/HADOOP-18044) | Hadoop
- Upgrade to JQuery 3.6.0 | Major | . | Yuan Luo | Yuan Luo |
+| [YARN-11195](https://issues.apache.org/jira/browse/YARN-11195) | Document
how to configure NUMA in YARN | Major | documentation | Prabhu Joseph | Samrat
Deb |
+| [HADOOP-18332](https://issues.apache.org/jira/browse/HADOOP-18332) | remove
rs-api dependency by downgrading jackson to 2.12.7 | Major | build | PJ
Fanning | PJ Fanning |
+
+
+### BUG FIXES:
+
+| JIRA | Summary | Priority | Component | Reporter | Contributor |
+|:---- |:---- | :--- |:---- |:---- |:---- |
+| [HADOOP-18085](https://issues.apache.org/jira/browse/HADOOP-18085) | S3 SDK
Upgrade causes AccessPoint ARN endpoint mistranslation | Major | fs/s3, test |
Bogdan Stolojan | Bogdan Stolojan |
+| [YARN-11092](https://issues.apache.org/jira/browse/YARN-11092) | Upgrade
jquery ui to 1.13.1 | Major | . | D M Murali Krishna Reddy | groot |
+| [HDFS-16453](https://issues.apache.org/jira/browse/HDFS-16453) | Upgrade
okhttp from 2.7.5 to 4.9.3 | Major | hdfs-client | Ivan Viaznikov | groot |
+| [YARN-10974](https://issues.apache.org/jira/browse/YARN-10974) | CS UI:
queue filter and openQueues param do not work as expected | Major | capacity
scheduler | Chengbing Liu | Chengbing Liu |
+| [HADOOP-18237](https://issues.apache.org/jira/browse/HADOOP-18237) | Upgrade
Apache Xerces Java to 2.12.2 | Major | build | groot | groot |
+| [HADOOP-18074](https://issues.apache.org/jira/browse/HADOOP-18074) |
Partial/Incomplete groups list can be returned in LDAP groups lookup | Major |
security | Philippe Lanoe | Larry McCay |
+
+
+### SUB-TASKS:
+
+| JIRA | Summary | Priority | Component | Reporter | Contributor |
+|:---- |:---- | :--- |:---- |:---- |:---- |
+| [HADOOP-18068](https://issues.apache.org/jira/browse/HADOOP-18068) | upgrade
AWS SDK to 1.12.132 | Major | build, fs/s3 | Steve Loughran | Steve Loughran |
+| [HADOOP-18307](https://issues.apache.org/jira/browse/HADOOP-18307) | remove
hadoop-cos as a dependency of hadoop-cloud-storage | Major | bulid, fs | Steve
Loughran | Steve Loughran |
+
+
Added: dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc (added)
+++ dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.asc Thu Jul 21 13:45:28 2022
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=323D
+-----END PGP SIGNATURE-----
Added: dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512 (added)
+++ dev/hadoop/hadoop-3.3.4-0/CHANGELOG.md.sha512 Thu Jul 21 13:45:28 2022
@@ -0,0 +1 @@
+SHA512 (CHANGELOG.md) =
b3217895144f9c031bf5d6ed4a0057966c13a01db143732108777768a52ad65fc57b291373dd32088b6098a544d507cccd269fb243db16b0e003dfc328d54fc3
Added: dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md (added)
+++ dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md Thu Jul 21 13:45:28 2022
@@ -0,0 +1,59 @@
+
+<!---
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+-->
+# Apache Hadoop 3.3.4 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities,
important issues, features, and major improvements.
+
+
+---
+
+* [HADOOP-18068](https://issues.apache.org/jira/browse/HADOOP-18068) | *Major*
| **upgrade AWS SDK to 1.12.132**
+
+The AWS SDK bundle JAR has been upgraded to 1.12.132; other than a test
failure this has proven stable. The versions of key shaded dependencies are:
jackson @ 2.12.3 and httpclient@4.5.13. Although 1.11.x SDK bundles include a
jackson version with known CVEs, the uses made of it by the AWS client are not
believed to be vulnerable.
+
+
+---
+
+* [HDFS-16453](https://issues.apache.org/jira/browse/HDFS-16453) | *Major* |
**Upgrade okhttp from 2.7.5 to 4.9.3**
+
+okhttp has been updated to address CVE-2021-0341
+
+
+---
+
+* [HADOOP-18237](https://issues.apache.org/jira/browse/HADOOP-18237) | *Major*
| **Upgrade Apache Xerces Java to 2.12.2**
+
+Apache Xerces has been updated to 2.12.2 to fix CVE-2022-23437
+
+
+---
+
+* [HADOOP-18307](https://issues.apache.org/jira/browse/HADOOP-18307) | *Major*
| **remove hadoop-cos as a dependency of hadoop-cloud-storage**
+
+We have recently become aware that libraries which include a shaded apache
httpclient libraries (hadoop-client-runtime.jar, aws-java-sdk-bundle.jar,
gcs-connector-shaded.jar, cos\_api-bundle-5.6.19.jar) all load and use the
unshaded resource mozilla/public-suffix-list.txt. If an out of date version of
this is found on the classpath first, attempts to negotiate TLS connections may
fail with the error "Certificate doesn't match any of the subject alternative
names". This release does not declare the hadoop-cos library to be a dependency
of the hadoop-cloud-storage POM, so applications depending on that module are
no longer exposed to this issue. If an application requires use of the
hadoop-cos module, please declare an explicit dependency.
+
+
+---
+
+* [HADOOP-18332](https://issues.apache.org/jira/browse/HADOOP-18332) | *Major*
| **remove rs-api dependency by downgrading jackson to 2.12.7**
+
+Downgrades Jackson from 2.13.2 to 2.12.7 to fix class conflicts in downstream
projects. This version of jackson does contain the fix for CVE-2020-36518.
+
+
+
Added: dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc (added)
+++ dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.asc Thu Jul 21 13:45:28 2022
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=qMsM
+-----END PGP SIGNATURE-----
Added: dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512
==============================================================================
--- dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512 (added)
+++ dev/hadoop/hadoop-3.3.4-0/RELEASENOTES.md.sha512 Thu Jul 21 13:45:28 2022
@@ -0,0 +1 @@
+SHA512 (RELEASENOTES.md) =
9e91590c59481e9c9ba3773a929071183af12279232680292f8ed7dade4aaa004458644808ef6dcac3c853af7bcc2afe098f28f13217b8a5a08bef359db05784
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org
