[CVE-2020-1947] Apache ShardingSphere(incubator) deserialization vulnerability

2020-03-10 Thread Chen QingYang
CVE-2020-1947: Apache ShardingSphere(incubator) deserialization vulnerability Severity: low Vendor: The Apache Software Foundation Versions Affected: ShardingSphere 4.0.0-RC3, 4.0.0 Description: Apache ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load

[ANNOUNCE] Apache ShardingSphere 4.0.1 available

2020-03-10 Thread zhaojun
Hi all, Apache ShardingSphere (incubating) Team is glad to announce the first release of Apache ShardingSphere Incubating 4.0.1. ShardingSphere is an open-source ecosystem consisted of a set of distributed database middleware solutions, including 2 independent products, Sharding-JDBC &

Re: Talking about remove branch proxy-with-netty-backend

2020-03-10 Thread zhangli...@apache.org
Done. -- Liang Zhang (John) Apache ShardingSphere & Dubbo Hongtao Gao 于2020年3月10日周二 下午2:59写道: > go for it  > > zhangli...@apache.org 于2020年3月10日周二 下午1:41写道: > > > The branch proxy-with-netty-backend is a too old branch which is > > establishing before we enter incubator. >

Re:Too slow to launch the service once ShardingJDBC is adopted

2020-03-10 Thread Juan Pan
Hi Terry, Something came to my mind that the configuration item `max.connections.size.per.query`(Default value is 1) can impact the elapsed time of metadata loading, can you configure it higher? Juan Pan (Trista) Senior DBA & PPMC of Apache

Re: Talking about remove branch proxy-with-netty-backend

2020-03-10 Thread Hongtao Gao
go for it  zhangli...@apache.org 于2020年3月10日周二 下午1:41写道: > The branch proxy-with-netty-backend is a too old branch which is > establishing before we enter incubator. > This branch is for using netty to connect MySQL. The feature is not > completed and it seems no further update plan by the

Re:Talking about remove branch proxy-with-netty-backend

2020-03-10 Thread KimmKing
+1 to remove it now After orchestration tasks,I will pick this feature enhancement. Or any buddy is interested in it, we could discuss details after it closed and make a plan to launch a new one. At 2020-03-10 13:41:23, "zhangli...@apache.org" wrote: >The branch proxy-with-netty-backend is