+1 (non-binding) - checked/verified signatures and checksums - built from source code succeeded - checked that there are no missed dependency artifacts - started a cluster, WebUI was accessible, ran a wordcount job , no suspicious log output - tested using SQL Client to submit a simple SQL job and the query result is expected - the web PR LGTM
Best, Leonard > 在 2021年1月21日，23:13，Matthias Pohl <matth...@ververica.com> 写道： > > +1 (non-binding) > > - verified checksums > - build Flink from the provided source code > - double-checked that the security fix is included in the source code > - started the a local Flink cluster and ran a job checking the logs for > exceptions > - verified that CVE-2020-17518 cannot be reproduced using the Flink > binaries > > Thanks for driving this, Xintong! > > On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <xts...@apache.org> wrote: > >> Hi everyone, >> >> Please review and vote on the release candidate #1 for the version 1.10.3, >> as follows: >> >> [ ] +1, Approve the release >> [ ] -1, Do not approve the release (please provide specific comments) >> >> The complete staging area is available for your review, which includes: >> * JIRA release notes [1], >> * the official Apache source release and binary convenience releases to be >> deployed to dist.apache.org [2], which are signed with the key with >> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3], >> * all artifacts to be deployed to the Maven Central Repository [4], >> * source code tag "release-1.10.3-rc1" [5], >> * website pull request listing the new release and adding announcement blog >> post [6]. >> >> The vote will be open for at least 72 hours. It is adopted by majority >> approval, with at least 3 PMC affirmative votes. >> >> Thanks, >> Xintong Song >> >> [1] >> >> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668 >> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1 >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS >> [4] https://repository.apache.org/content/repositories/orgapacheflink-1412 >> [5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1 >> [6] https://github.com/apache/flink-web/pull/413 >> > > > -- > > Matthias Pohl | Engineer > > Follow us @VervericaData Ververica <https://www.ververica.com/> > > -- > > Join Flink Forward <https://flink-forward.org/> - The Apache Flink > Conference > > Stream Processing | Event Driven | Real Time > > -- > > Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany > > -- > Ververica GmbH > Registered at Amtsgericht Charlottenburg: HRB 158244 B > Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl Anton > Wehner
