CVE-2018-8029: Apache Hadoop Privilege escalation vulnerability

2019-05-29 Thread Akira Ajisaka
CVE-2018-8029: Apache Hadoop Privilege escalation vulnerability Severity: Critical Vendor: The Apache Software Foundation Versions Affected: 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, 2.2.0 to 2.8.4 Description: A user who can escalate to yarn user can possibly run arbitrary commands as root user.

When workers >= 2 and ps == 0 worker should throw exception

2019-05-29 Thread kevin su
Hi all, I found that when workers >= 2 and ps == 0 worker just return false . private boolean determineIfDistributed(int nWorkers, int nPS) throws ParseException { // Check #workers and #ps. // When distributed training is required if (nWorkers >= 2 && nPS > 0) { return