David Knupp has posted comments on this change. ( http://gerrit.cloudera.org:8080/15761 )
Change subject: IMPALA-9648: Exclude netty from hadoop-hdfs mvn download ...................................................................... Patch Set 3: (1 comment) http://gerrit.cloudera.org:8080/#/c/15761/3/fe/pom.xml File fe/pom.xml: http://gerrit.cloudera.org:8080/#/c/15761/3/fe/pom.xml@755 PS3, Line 755: <exclude>io.netty:netty-all:4.1.42.Final</exclude> > Can we tighten this up to exclude everything from io.netty? I.e. io.netty:* But note that your suggestion is exactly what I had in patch #2, and it failed. - https://jenkins.impala.io/job/gerrit-verify-dryrun/5692/console - https://jenkins.impala.io/job/all-build-options-ub1604/5596/ Also, see the top comment on the internal mirror of IMPALA-9648. Is there something I need to do to toggle USE_CDP_HIVE when I run the verify job on upstream jenkins? Note that Abhishek also provided some additional details about the CVE that caused this issue. I might try something based on that new info. -- To view, visit http://gerrit.cloudera.org:8080/15761 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I69bc84eaa692e78988cff06bb1b7e5fd2a0bb774 Gerrit-Change-Number: 15761 Gerrit-PatchSet: 3 Gerrit-Owner: David Knupp <[email protected]> Gerrit-Reviewer: David Knupp <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Tamas Mate <[email protected]> Gerrit-Reviewer: Tim Armstrong <[email protected]> Gerrit-Comment-Date: Fri, 24 Apr 2020 15:29:27 +0000 Gerrit-HasComments: Yes
