[jira] [Created] (PARQUET-2145) Release 1.12.3

2022-05-04 Thread Gidon Gershinsky (Jira) 
Gidon Gershinsky created PARQUET-2145:
-

 Summary: Release 1.12.3
 Key: PARQUET-2145
 URL: https://issues.apache.org/jira/browse/PARQUET-2145
 Project: Parquet
  Issue Type: Task
  Components: parquet-mr
Reporter: Gidon Gershinsky
 Fix For: 1.12.3






--
This message was sent by Atlassian Jira
(v8.20.7#820007)

Re: Meeting notes for Parquet monthly sync - 4/27/2022

2022-05-04 Thread Gidon Gershinsky 
Hi all, we're starting to work on this part:

*Release 1.12.3   SNAPSHOT release *

Meaning that technically there will be two releases, starting with an
unofficial snapshot of the current master for completing dependent prs in
other projects - followed by the official parquet-mr-1.12.3 release.

For the latter, I've created
https://issues.apache.org/jira/browse/PARQUET-2145 . Feel free to add
relevant jiras as dependencies for this one (preferably if their PRs are
already merged in the master branch). I'll also make a pass over the recent
commits / jiras.


Cheers, Gidon


On Wed, Apr 27, 2022 at 8:03 PM Xinli shang  wrote:

> 4/27/2022
>
> Attendees (Timothy Miller, Vinoo Ganesh, Satish K, Gidon Gershinsky, Xinli
> Shang, Huaxin Gao)
>
>1.
>
>Cell-Level encryption
>1.
>
>   Internal implementation and rollout
>   2.
>
>   Welcome new comments
>   2.
>
>Release 1.12.3
>1.
>
>   SNAPSHOT release - Gidon will take the lead
>   3.
>
>ID resolution
>1.
>
>   Huaxin will address Ryan’s comments
>   4.
>
>UUID support for parquet-cli
>1.
>
>   See some exceptions when running the tool. Timothy will investigate
>   it.
>   5. The next meeting will be at 8:30 am on Tuesday
>
>
> --
> Xinli Shang
> VP Apache Parquet PMC Chair
> Tech Lead Manager @ Uber Data Infra
>

[jira] [Commented] (PARQUET-2127) Security risk in latest parquet-jackson-1.12.2.jar

2022-05-04 Thread Brais Couce (Jira) 


[ 
https://issues.apache.org/jira/browse/PARQUET-2127?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17531612#comment-17531612
 ] 

Brais Couce commented on PARQUET-2127:
--

Hi,

I see that the first PR was merged into master and there is a second PR to 
update again the version. Does this means that this ticket will be included in 
the next version (1.13.0)? Do you know if there is release date?

Regards.

> Security risk in latest parquet-jackson-1.12.2.jar
> --
>
> Key: PARQUET-2127
> URL: https://issues.apache.org/jira/browse/PARQUET-2127
> Project: Parquet
>  Issue Type: Improvement
>Reporter: phoebe chen
>Priority: Major
>
> Embed jackson-databind:2.11.4 has security risk of Possible DoS if using JDK 
> serialization to serialize JsonNode 
> ([https://github.com/FasterXML/jackson-databind/issues/3328] ), upgrade to 
> 2.13.1 can fix this.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

[GitHub] [parquet-mr] shangxinli commented on a diff in pull request #955: PARQUET-2127: update jackson-databind to 2.13.2.2

2022-05-04 Thread GitBox 


shangxinli commented on code in PR #955:
URL: https://github.com/apache/parquet-mr/pull/955#discussion_r865064710


##
pom.xml:
##
@@ -73,7 +73,7 @@
 com.fasterxml.jackson.core
 com.fasterxml.jackson
 2.13.2
-${jackson.version}
+2.13.2.2

Review Comment:
   What is the reason that we split the two versions(jackson.version, 
jackson-databind.version)?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@parquet.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[jira] [Commented] (PARQUET-2127) Security risk in latest parquet-jackson-1.12.2.jar

2022-05-04 Thread ASF GitHub Bot (Jira) 


[ 
https://issues.apache.org/jira/browse/PARQUET-2127?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17531840#comment-17531840
 ] 

ASF GitHub Bot commented on PARQUET-2127:
-

shangxinli commented on code in PR #955:
URL: https://github.com/apache/parquet-mr/pull/955#discussion_r865064710


##
pom.xml:
##
@@ -73,7 +73,7 @@
 com.fasterxml.jackson.core
 com.fasterxml.jackson
 2.13.2
-${jackson.version}
+2.13.2.2

Review Comment:
   What is the reason that we split the two versions(jackson.version, 
jackson-databind.version)?





> Security risk in latest parquet-jackson-1.12.2.jar
> --
>
> Key: PARQUET-2127
> URL: https://issues.apache.org/jira/browse/PARQUET-2127
> Project: Parquet
>  Issue Type: Improvement
>Reporter: phoebe chen
>Priority: Major
>
> Embed jackson-databind:2.11.4 has security risk of Possible DoS if using JDK 
> serialization to serialize JsonNode 
> ([https://github.com/FasterXML/jackson-databind/issues/3328] ), upgrade to 
> 2.13.1 can fix this.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)