+1 binding Since there is only one new commit since RC0, I have just done some simple verification before carrying the +1 from RC0
Checked sigs and sums: Matched Log4j2 2.17.0 in tarball: Confirmed Thanks. Tak Lon (Stephen) Wu <[email protected]> 于2021年12月21日周二 01:47写道： > +1 (non-binding) > > * Signature: ok > * Checksum : ok > * Rat check (1.8.0_292): ok > - mvn clean apache-rat:check > * Built from source (1.8.0_292): ok > - mvn clean install -DskipTests > * Unit tests pass (1.8.0_292): ok > - mvn package -Dsurefire.rerunFailingTestsCount=3 > * confirmed log4j2 2.17.0 is part of the dependency tree > > -Stephen > > On Sun, Dec 19, 2021 at 10:15 PM Guangxu Cheng <[email protected]> wrote: > > > Please vote on this Apache hbase operator tools release candidate, > > hbase-operator-tools-1.2.0RC1 > > > > The VOTE will remain open for at least 72 hours. > > > > [ ] +1 Release this package as Apache hbase operator tools 1.2.0 > > [ ] -1 Do not release this package because ... > > > > The tag to be voted on is 1.2.0RC1: > > > > https://github.com/apache/hbase-operator-tools/tree/1.2.0RC1 > > > > This tag currently points to git reference > > > > 478af00af79f82624264fd2bb447b97fecc8e790 > > > > The release files, including signatures, digests, as well as CHANGES.md > > and RELEASENOTES.md included in this RC can be found at: > > > > > > > https://dist.apache.org/repos/dist/dev/hbase/hbase-operator-tools-1.2.0RC1 > > > > Maven artifacts are available in a staging repository at: > > > > https://repository.apache.org/content/repositories/org apache > hbase-1479 > > <https://repository.apache.org/content/repositories/orgapachehbase-1479> > > Artifacts were signed with the 5EF3A66D57EC647A key which can be found > in: > > > > https://downloads.apache.org/hbase/KEYS > > > > hbase-operator-tools 1.2.0 contains a critical security fix for > addressing > > the log4j2 > > CVE-2021-44228 and CVE-2021-45105. All users who use hbase-operator-tools > > should upgrade to hbase-operator-tools 1.2.0 ASAP. > > > > To learn more about Apache hbase operator tools, please see > > > > http://hbase.apache.org/ > > > > Thanks, > > Your HBase Release Manager > > ------ > > Best Regards, > > Guangxu > > >
