[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17735643#comment-17735643
]
Steve Loughran commented on HADOOP-18033:
-
java11, please please please
> Upgrade fasterxml
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17731687#comment-17731687
]
Ayush Saxena commented on HADOOP-18033:
---
I have almost lost track of this and honestly didn't
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17731654#comment-17731654
]
PJ Fanning commented on HADOOP-18033:
-
We're stuck on Jackson 2.12 because of jersey v1. Jackson
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17731624#comment-17731624
]
Steve Loughran commented on HADOOP-18033:
-
transient CVE issues (snakeyaml) are generating
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17566593#comment-17566593
]
Viraj Jasani commented on HADOOP-18033:
---
Thanks [~ayushtkn], HADOOP-18332 PRs (trunk and 3.3)
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17566573#comment-17566573
]
Ayush Saxena commented on HADOOP-18033:
---
I have approved the PR at HADOOP-18332, Tried the two
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565986#comment-17565986
]
Ayush Saxena commented on HADOOP-18033:
---
[~ste...@apache.org] I have a PR which reverts the two
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565978#comment-17565978
]
PJ Fanning commented on HADOOP-18033:
-
[~ste...@apache.org] I've had to make a change to
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565967#comment-17565967
]
Steve Loughran commented on HADOOP-18033:
-
i want to kick off a 3.3 3+ cve-only release this
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565145#comment-17565145
]
Viraj Jasani commented on HADOOP-18033:
---
{quote}Currently I recommend downgrading to 2.12.7 in
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565079#comment-17565079
]
Ayush Saxena commented on HADOOP-18033:
---
{quote}is it ok to downgrade jackson to 2.12.7? - has
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565050#comment-17565050
]
PJ Fanning commented on HADOOP-18033:
-
So the Tez issue seems (possibly) to be caused by
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564983#comment-17564983
]
Ayush Saxena commented on HADOOP-18033:
---
[~pj.fanning] I think that was tried:
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564966#comment-17564966
]
PJ Fanning commented on HADOOP-18033:
-
[~ayushtkn] would
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564957#comment-17564957
]
Steve Loughran commented on HADOOP-18033:
-
ok. someone do the 3.3.x revert and i will get it
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564839#comment-17564839
]
Ayush Saxena commented on HADOOP-18033:
---
Well, Jersey upgrade is good to have, for Java-11, kind
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564792#comment-17564792
]
Akira Ajisaka commented on HADOOP-18033:
[~vjasani] Currently I recommend downgrading to 2.12.7
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564787#comment-17564787
]
Viraj Jasani commented on HADOOP-18033:
---
[~aajisaka] do you recommend downgrading to 2.12.7 only
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564780#comment-17564780
]
Akira Ajisaka commented on HADOOP-18033:
Note: When reverting this issue, I recommend to use a
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564761#comment-17564761
]
Akira Ajisaka commented on HADOOP-18033:
bq. we might have to call out on the Jackson CVE
The
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564712#comment-17564712
]
Viraj Jasani commented on HADOOP-18033:
---
{quote}In my past experience, Jersey 2.x upgrade takes a
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564702#comment-17564702
]
Cheng Pan commented on HADOOP-18033:
Reverting Jackson in the 3.3 branch looks reasonable to me,
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564665#comment-17564665
]
Ayush Saxena commented on HADOOP-18033:
---
Thanx [~aajisaka] for checking, I am +1 on revert
>
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564664#comment-17564664
]
Akira Ajisaka commented on HADOOP-18033:
Thank you [~ayushtkn] [~pan3793] [~vjasani] for your
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556118#comment-17556118
]
Viraj Jasani commented on HADOOP-18033:
---
{quote}Excluding/Removing javax.ws.rs-api will make
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556066#comment-17556066
]
Ayush Saxena commented on HADOOP-18033:
---
Shading issue we might get rid of, because the issue
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556004#comment-17556004
]
Cheng Pan commented on HADOOP-18033:
Looks reasonable, thanks [~ayushtkn] and [~vjasani] for
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556003#comment-17556003
]
Viraj Jasani commented on HADOOP-18033:
---
Once QA results are available, will create new Jira to
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556002#comment-17556002
]
Viraj Jasani commented on HADOOP-18033:
---
Yeah that problem should be at least resolved by #4461
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556001#comment-17556001
]
Ayush Saxena commented on HADOOP-18033:
---
{quote}Actually, javax.ws.rs-api is not even clashing
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556000#comment-17556000
]
Viraj Jasani commented on HADOOP-18033:
---
Actually, javax.ws.rs-api is not even clashing with
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555999#comment-17555999
]
Viraj Jasani commented on HADOOP-18033:
---
Thanks [~ayushtkn], yes we should hopefully get the full
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555993#comment-17555993
]
Ayush Saxena commented on HADOOP-18033:
---
Removing jsr311-api from hadoop, will not cause
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555982#comment-17555982
]
Viraj Jasani commented on HADOOP-18033:
---
Remove jsr311-api dependency:
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555980#comment-17555980
]
Viraj Jasani commented on HADOOP-18033:
---
[~pan3793] HADOOP-15984 has migration to Jersey 2.x
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555979#comment-17555979
]
Viraj Jasani commented on HADOOP-18033:
---
[~pan3793] Thanks for your comments.
{quote}And I also
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555977#comment-17555977
]
Cheng Pan commented on HADOOP-18033:
The mvnrepository[1] tips that com.sun.jersey:jersey-core was
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555973#comment-17555973
]
Viraj Jasani commented on HADOOP-18033:
---
{quote}The duplicate class exception that we saw here
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555953#comment-17555953
]
Cheng Pan commented on HADOOP-18033:
> BTW. I am not sure what Spark and Kyuubi issues are exactly,
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555916#comment-17555916
]
Ayush Saxena commented on HADOOP-18033:
---
Spent some time checking if we have any quick solution
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555848#comment-17555848
]
Ayush Saxena commented on HADOOP-18033:
---
{quote}For this one, is it be convenient to include
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555805#comment-17555805
]
Viraj Jasani commented on HADOOP-18033:
---
Ah I see, HADOOP-18178 has also bumped Jackson to 2.13.2
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555804#comment-17555804
]
Viraj Jasani commented on HADOOP-18033:
---
[~ayushtkn] Thanks for posting your findings, just had a
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555743#comment-17555743
]
Ayush Saxena commented on HADOOP-18033:
---
[~ste...@apache.org] It added
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555741#comment-17555741
]
Steve Loughran commented on HADOOP-18033:
-
what is the problem here?
> Upgrade fasterxml
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17555470#comment-17555470
]
Ayush Saxena commented on HADOOP-18033:
---
guess, this broke the way for tez to upgrade post 3.3.1
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17455047#comment-17455047
]
Viraj Jasani commented on HADOOP-18033:
---
Sure [~aajisaka], I am on it.
> Upgrade fasterxml
[
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17455021#comment-17455021
]
Akira Ajisaka commented on HADOOP-18033:
Merged the PR into trunk. Hi [~vjasani], would you
48 matches
Mail list logo
