If HBase does not patch 1.3 or 1.4 for the Jackson CVE, the recommendation for concerned users would be to use 1.5. I think that sounds like we would want to get a 1.5 branch for 4.14, unless we think 4.15 is almost ready?
Either way, I am not sure if this would need to block 4.14.3, since it will take some time for this to play out? On Wed, Aug 7, 2019 at 11:10 AM Artem Ervits <[email protected]> wrote: > As described in HBASE-22728, are we planning to get a 1.5 branch for 4.14 > or are we targeting 4.15 and 5.x for HBase 1.5? > > On Tue, Aug 6, 2019, 5:01 PM swaroopa kadam <[email protected]> > wrote: > > > non-binding -1 > > > > Uncovered a blocker Jira PHOENIX-5348. > > I will be back with RC2 soon. > > > > Thank you. > > > > On Tue, Aug 6, 2019 at 12:58 PM swaroopa kadam < > [email protected] > > > > > wrote: > > > > > Hello Everyone, > > > > > > This is a call for a vote on Apache Phoenix 4.14.3 RC1. This is a patch > > > release of Phoenix 4.14 and is compatible with Apache HBase 1.3 and > > > 1.4. The release includes both a source-only release and a convenience > > > binary > > > release for each supported HBase version. > > > > > > This release includes critical bug fixes and improvements for secondary > > > indexes -- making them self-consistent. > > > > > > The source tarball, including signatures, digests, etc can be found at: > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.3-rc1/src/ > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.4-rc1/src/ > > > > > > The binary artifacts can be found at: > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.3-rc1/bin/ > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.4-rc1/bin/ > > > > > > For a complete list of changes, see: > > > > > > > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315120&version=12345601 > > > > > > Artifacts are signed with my "CODE SIGNING KEY": 48B7807D95F127B5 > > > > > > KEYS file available here: > > > https://dist.apache.org/repos/dist/dev/phoenix/KEYS > > > > > > The tag to be voted upon: > > > https://github.com/apache/phoenix/releases/tag/4.14.3-HBase-1.3-rc1 > > > https://github.com/apache/phoenix/releases/tag/4.14.3-HBase-1.4-rc1 > > > > > > The vote will be open for at least 72 hours. Please vote: > > > > > > [ ] +1 approve > > > [ ] +0 no opinion > > > [ ] -1 disapprove (and the reason why) > > > > > > Thanks, > > > The Apache Phoenix Team > > > > > > -- > > > > > > > > > Swaroopa Kadam > > > [image: https://]about.me/swaroopa_kadam > > > < > > > https://about.me/swaroopa_kadam?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api > > > > > > > > > > > > -- > > > > > > Swaroopa Kadam > > [image: https://]about.me/swaroopa_kadam > > < > > > https://about.me/swaroopa_kadam?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api > > > > > >
