The first release candidate for HBase 1.4.12 is available for download: https://dist.apache.org/repos/dist/dev/hbase/hbase-1.4.12RC0/
Maven artifacts are also available in a staging repository at: https://repository.apache.org/content/repositories/orgapachehbase-1373/ Artifacts are signed with my key (0D80DB7C) published in our KEYS file at http://www.apache.org/dist/hbase/KEYS The RC corresponds to the signed tag 1.4.12RC0, which currently points to commit ref 6ae4a77408ad35d6a7a4e5cebfd401fc4b72b5ec HBase 1.4.12 is the next maintenance release in the HBase 1.4 line, continuing on the theme of bringing a stable, reliable database to the Hadoop and NoSQL communities. This release includes about a dozen fixes and improvements done by the HBase community in the five weeks since the prior release. The detailed source and binary compatibility report vs 1.4.11 has been published for your review, at: https://s.apache.org/hbase-1.4.12-rc0-compat-report The report shows no issues. Critical changes include: * HBASE-23227 - Upgrade jackson-databind to 2.9.10.1 to avoid recent CVEs * HBASE-23287 - WALs not aged off of HDFS because LogCleaner is not added to choreService The full set of fixes in this release can be found here: https://s.apache.org/hbase-1.4.12-jira-release-notes and in the CHANGES.txt file included in the distribution. Please try out this candidate and vote +1/-1 on whether we should release these artifacts as Apache HBase 1.4.12. The VOTE will remain open for at least 72 hours. Thanks! --busbey as of this email the posted artifacts have the following SHA512: hbase-1.4.12-src.tar.gz: 72A0E4DF BB44C4F3 A07E3FB5 5D6FD3BC DD40C9CC BCD311C0 CB61ACB4 2756C735 D465A340 FB05176D DDCB29C5 A5D695F6 BC8F8E7E 3AAF6499 8A149DA8 EC6C4E7A hbase-1.4.12-bin.tar.gz: 58E2873F E4725E0C 6E77437E B09864A5 BD9E50DD 9BBE84AD 7461FBCA 8AE51A0C D91DA20B 90E8AD82 DCF50EB2 C82AC3C8 26CD1C58 8ED69D2A 1E6AD0B4 24CD94D5