In https://issues.apache.org/jira/browse/RATIS-1342 , we have bumped Netty
version to 4.1.60.Final in ratis-thirdparty due to the Netty
vulnerabilities.
- https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2
- https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj

Should we also have a ratis-thridparty release?

Tsz-Wo


On Sat, Mar 20, 2021 at 12:07 AM Hanisha Koneru
<[email protected]> wrote:

> Thanks runzhiwang for rolling out the RC.
>
> +1 (binding)
>
> - Verified checksums and signatures
> - Built from source
> - Ran sanity checks (arithmetic and filestore examples)
>
> Thanks
> Hanisha
>
> > On Mar 18, 2021, at 7:07 PM, Rui Wang <[email protected]> wrote:
> >
> > +1 (non-binding)
> >
> > -verify signature and checksums: ok
> > - build from source: ok
> >
> > Question: why Ratis publishes jars to https://dist.apache.org/repos/dist
> > <https://dist.apache.org/repos/dist/dev/ratis/2.0.0/rc4/> even if Ratis
> > will be published to maven repo?
> >
> >
> > -Rui
> >
> >
> > On Thu, Mar 18, 2021 at 4:29 PM Xiaoyu Yao <[email protected]>
> > wrote:
> >
> >> +1 (binding)
> >>
> >> - Verified all checksums and signatures.
> >> - Checked DISCLAIMER, LICENSE and NOTICE.
> >> - Built from source successfully.
> >> - Ran filestore and the arithmetic examples.
> >>
> >> Thanks,
> >> Xiaoyu
> >>
> >> On Thu, Mar 18, 2021 at 6:48 AM Tsz Wo Sze <[email protected]> wrote:
> >>
> >>> +1 (binding)
> >>>
> >>> - Verified all checksums and signatures.
> >>> - Checked DISCLAIMER, LICENSE and NOTICE.
> >>> - Built from source successfully.
> >>>
> >>> Thanks a lot for rolling the rc!
> >>> Tsz-Wo
> >>>
> >>>
> >>> On Thu, Mar 18, 2021 at 7:03 PM Lokesh Jain <[email protected]
> >
> >>> wrote:
> >>>
> >>>> Thanks runzhiwang for working on the release!
> >>>>
> >>>> +1 (binding)
> >>>>
> >>>> - Verified checksum
> >>>> - Built from source
> >>>> - Ran arithmetic and filestore examples
> >>>>
> >>>> Regards
> >>>> Lokesh
> >>>>
> >>>>> On 18-Mar-2021, at 3:44 PM, Shashikant Banerjee <
> >>> [email protected]>
> >>>> wrote:
> >>>>>
> >>>>> +1 (binding)
> >>>>>
> >>>>> * checked signatures
> >>>>> * verified checksums
> >>>>> * Compiled Ratis from  source
> >>>>> * Ran RaftConfigurationChange tests.
> >>>>>
> >>>>> Thanks @runzhiwang(王杰) <[email protected]> for putting this rc
> >>>>> together.
> >>>>>
> >>>>> Thanks
> >>>>> Shashi
> >>>>>
> >>>>> On Wed, Mar 17, 2021 at 12:18 AM Chris Nauroth <[email protected]>
> >>>> wrote:
> >>>>>
> >>>>>> +1 (non-binding)
> >>>>>>
> >>>>>> * Verified PGP signatures for binary and source tarball.
> >>>>>> * Verified checksums for binary and source tarball.
> >>>>>> * Confirmed year 2021 in NOTICE file.
> >>>>>> * Successfully built from source and ran tests.
> >>>>>> * Confirmed fix for RATIS-1147: TestMultiRaftGroup on
> >>>>>> MiniRaftClusterWithNetty is no longer failing.
> >>>>>> * Confirmed presence of fix for RATIS-1332: Ratis server couln't be
> >>>>>> recovered from failed initialization state.
> >>>>>> * Manually tested by running FileStore, Arithmetic, and Counter
> >>>> examples.
> >>>>>>
> >>>>>> Thank you for your diligence on these release candidates,
> >> runzhiwang.
> >>>>>>
> >>>>>> Chris Nauroth
> >>>>>>
> >>>>>>
> >>>>>> On Tue, Mar 16, 2021 at 6:39 AM Elek, Marton <[email protected]>
> >> wrote:
> >>>>>>
> >>>>>>> +1 (binding)
> >>>>>>>
> >>>>>>>
> >>>>>>> * checked the signatures
> >>>>>>> * checked the checksums (note: checksum files are not "sha512sum
> >> -c"
> >>>>>>> compatible)
> >>>>>>> * Compiled Ratis from the source
> >>>>>>> * Compared source package with the content of the tagged commit
> >>>>>>>
> >>>>>>> * Executed full Ozone CI test suite on a branch which used the
> >>> staged
> >>>>>>> artifacts: https://github.com/elek/ozone/actions/runs/657324335
> >>>>>>>
> >>>>>>> * Deployed Ozone to Kubernetes and executed simple freon test.
> >>> Worked
> >>>>>>> well. (previous annoying NPE has been disappeared <3 + ratis dead
> >>> lock
> >>>>>>> disappeared <3)
> >>>>>>>
> >>>>>>> ozone version
> >>>>>>>
> >>>>>>> Source code repository https://github.com/apache/ozone.git -r
> >>>>>>> ca6026d55f32520e9a28a7d0936da04ff5a2e90e
> >>>>>>> Compiled by root on 2021-03-16T13:07Z
> >>>>>>> Compiled with protoc 2.5.0
> >>>>>>> From source with checksum cd133d775af90a27db52eebe6b95f
> >>>>>>> With Apache Ratis: 2.0.0 from
> >>> 0c9913f602a49231621323bc903d91d5bbb06cb7
> >>>>>>>
> >>>>>>> Thanks for this next rc,
> >>>>>>> Marton
> >>>>>>>
> >>>>>>
> >>>>
> >>>>
> >>>
> >>
>
>

Reply via email to