+1 (non-binding) - checked/verified signatures and checksums - build Flink from the attached source code - started a Yarn per-job/session cluster - check webUI is normal and no suspicious logs and exceptions
Best, Yang Leonard Xu <xbjt...@gmail.com> 于2021年1月25日周一 上午10:31写道： > +1 (non-binding) > > - checked/verified signatures and checksums > - built from source code succeeded > - checked that there are no missed dependency artifacts > - started a cluster, WebUI was accessible, ran a wordcount job , no > suspicious log output > - tested using SQL Client to submit a simple SQL job and the query result > is expected > - the web PR LGTM > > > Best, > Leonard > > > 在 2021年1月21日，23:13，Matthias Pohl <matth...@ververica.com> 写道： > > > > +1 (non-binding) > > > > - verified checksums > > - build Flink from the provided source code > > - double-checked that the security fix is included in the source code > > - started the a local Flink cluster and ran a job checking the logs for > > exceptions > > - verified that CVE-2020-17518 cannot be reproduced using the Flink > > binaries > > > > Thanks for driving this, Xintong! > > > > On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <xts...@apache.org> wrote: > > > >> Hi everyone, > >> > >> Please review and vote on the release candidate #1 for the version > 1.10.3, > >> as follows: > >> > >> [ ] +1, Approve the release > >> [ ] -1, Do not approve the release (please provide specific comments) > >> > >> The complete staging area is available for your review, which includes: > >> * JIRA release notes [1], > >> * the official Apache source release and binary convenience releases to > be > >> deployed to dist.apache.org [2], which are signed with the key with > >> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3], > >> * all artifacts to be deployed to the Maven Central Repository [4], > >> * source code tag "release-1.10.3-rc1" [5], > >> * website pull request listing the new release and adding announcement > blog > >> post [6]. > >> > >> The vote will be open for at least 72 hours. It is adopted by majority > >> approval, with at least 3 PMC affirmative votes. > >> > >> Thanks, > >> Xintong Song > >> > >> [1] > >> > >> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668 > >> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1 > >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS > >> [4] > https://repository.apache.org/content/repositories/orgapacheflink-1412 > >> [5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1 > >> [6] https://github.com/apache/flink-web/pull/413 > >> > > > > > > -- > > > > Matthias Pohl | Engineer > > > > Follow us @VervericaData Ververica <https://www.ververica.com/> > > > > -- > > > > Join Flink Forward <https://flink-forward.org/> - The Apache Flink > > Conference > > > > Stream Processing | Event Driven | Real Time > > > > -- > > > > Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany > > > > -- > > Ververica GmbH > > Registered at Amtsgericht Charlottenburg: HRB 158244 B > > Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl Anton > > Wehner > >
