steveloughran commented on PR #5229: URL: https://github.com/apache/hadoop/pull/5229#issuecomment-1473838489
@degant it won't be in the release about to ship (3.3.5) because if we kept having to abort an RC to deal with a transient CVE we would never be able to ship anything. And doing last-minute jar updates is how you get major regressions in without noticing. please review that RC and see if there are other issues which would stop you upgrading. ``` The RC is available at: https://dist.apache.org/repos/dist/dev/hadoop/hadoop-3.3.5-RC3/ The git tag is release-3.3.5-RC3, commit 706d88266ab The maven artifacts are staged at https://repository.apache.org/content/repositories/orgapachehadoop-1369/ You can find my public key at: https://dist.apache.org/repos/dist/release/hadoop/common/KEYS Change log https://dist.apache.org/repos/dist/dev/hadoop/hadoop-3.3.5-RC3/CHANGELOG.md Release notes https://dist.apache.org/repos/dist/dev/hadoop/hadoop-3.3.5-RC3/RELEASENOTES.md ``` and helping get that netty upgrade into the release which comes after 3.3.5, with testing, is always welcome -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
