Hi Team! I have created a tez-0.10.6 release candidate rc1.
(First of all, for those who missed RC0 <https://github.com/apache/tez/releases/tag/release-0.10.6-rc0>: it never reached the voting stage. It included the initial set of security fixes, but additional vulnerabilities were reported in the meantime.) GIT source tag: release-0.10.6-rc1 <https://github.com/apache/tez/releases/tag/release-0.10.6-rc1> (2002ddc98518e47598263594554570f95b351d7a) Staging site: https://dist.apache.org/repos/dist/dev/tez/apache-tez-0.10 .6-rc1/ (svn revision: 86796) PGP release keys (signed using 0x4ECA5CA5E303605A) http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x4ECA5CA5E303605A https://keyserver.ubuntu.com/pks/lookup?search=0x4ECA5CA5E303605A&fingerprint=on&op=index KEYS file available at https://dist.apache.org/repos/dist/release/tez/KEYS One can look into the issues fixed in this release at: https://issues.apache.org/jira/issues/?jql=project+%3D+TEZ+AND+fixVersion+%3D+0.10.6 This is essentially a security-only release with contents as below: https://github.com/apache/tez/blob/2002ddc98518e47598263594554570f95b351d7a/CHANGES.txt#L10-L16 The vote will be open for at least 72 hours: [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and the reason why) Here is my +1 (binding). Tested a simple DAG; used this <https://github.com/apache/tez/blob/master/dev-support/bin/tez_run_example.sh> script with some modifications to use the current 0.10.6 artifacts. I ran a full hive precommit with the staged artifacts <https://repository.apache.org/content/repositories/orgapachetez-1083/>, no tez-related failures found (PR <https://github.com/apache/hive/pull/6614>, tests <https://ci.hive.apache.org/blue/organizations/jenkins/hive-precommit/detail/PR-6614/4/pipeline> ) Regards, Laszlo Bodor Apache Tez PMC Chair
