I'll do my best to test this; I'm a bit broken right now. I think we should mention in a release notes that is the version of a log4j included in this and all previous releases is not vulnerable. But provide a list plus links to any that have been fixed
On Fri, 10 Dec 2021 at 02:09, Chao Sun <sunc...@apache.org> wrote: > Hi all, > > Sorry for the long delay. I've prepared RC0 for Hadoop 3.3.2 below: > > The RC is available at: > http://people.apache.org/~sunchao/hadoop-3.3.2-RC0/ > The RC tag is at: > https://github.com/apache/hadoop/releases/tag/release-3.3.2-RC0 > The Maven artifacts are staged at: > https://repository.apache.org/content/repositories/orgapachehadoop-1330/ > > You can find my public key at: https://people.apache.org/~sunchao/KEYS > > Please evaluate the RC and vote. > > Thanks, > Chao >
