[jira] [Created] (KYLIN-1894) GlobalDictionary may corrupt when server suddenly crash
Yerui Sun created KYLIN-1894: Summary: GlobalDictionary may corrupt when server suddenly crash Key: KYLIN-1894 URL: https://issues.apache.org/jira/browse/KYLIN-1894 Project: Kylin Issue Type: Improvement Components: Metadata Affects Versions: v1.5.3 Reporter: Yerui Sun Assignee: Yerui Sun Fix For: v1.5.3 Global Dictionary store data on hdfs directly, and overwrite directly when data file updated. If the server crashed suddenly during writing file, the data file may be corrupt and can't be recovered. To resolve this problem, copy the data file into a tmp directory and copy back after the file is updated successfully. I'll post a patch later with this solution. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Created] (KYLIN-1893) Upgrade spring-boot framework because of security vulnerabilities
kangkaisen created KYLIN-1893: - Summary: Upgrade spring-boot framework because of security vulnerabilities Key: KYLIN-1893 URL: https://issues.apache.org/jira/browse/KYLIN-1893 Project: Kylin Issue Type: Bug Components: REST Service Affects Versions: v1.5.2 Reporter: kangkaisen Assignee: Zhong,Jason Priority: Critical The Spring Boot Framework has a expression of SPEL type injection common vulnerabilities, which affect versions is 1.1-1.3.0. we need upgrade to version 1.3.1 or later. https://www.chinacybersafety.com/tag/the-common-vulnerabilities-and-high-risk-vulnerabilities-early-warning-framework-spring-boot -- This message was sent by Atlassian JIRA (v6.3.4#6332)
