[
https://issues.apache.org/jira/browse/IMPALA-14129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17973531#comment-17973531
]
ASF subversion and git services commented on IMPALA-14129:
----------------------------------------------------------
Commit 256048770092a3eb9b842b1deaf9ed56752468c6 in impala's branch
refs/heads/master from Joe McDonnell
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=256048770 ]
IMPALA-13952: Update curl version to 8.14.1
This bumps the curl version to the latest (8.14.1) to resolve
some minor CVEs. See https://curl.se/docs/security.html
This also incorporates a newer toolchain with the fix for
IMPALA-14129, bumping the patch level on hadoop-client.
Testing:
- Ran precommit
Change-Id: Ia488b381f0cd9f4e6d239d265a897be1ab96915e
Reviewed-on: http://gerrit.cloudera.org:8080/23013
Tested-by: Impala Public Jenkins <[email protected]>
Reviewed-by: Jason Fehr <[email protected]>
Reviewed-by: Riza Suminto <[email protected]>
> Native-toolchain's hadoop-client build should not contact Apache servers
> ------------------------------------------------------------------------
>
> Key: IMPALA-14129
> URL: https://issues.apache.org/jira/browse/IMPALA-14129
> Project: IMPALA
> Issue Type: Task
> Components: Infrastructure
> Affects Versions: Impala 5.0.0
> Reporter: Joe McDonnell
> Assignee: Joe McDonnell
> Priority: Major
> Fix For: Impala 5.0.0
>
>
> The hadoop-client build (needed for ARM) does not get all of its dependencies
> from the central repository. Instead, it has some attempts to download from
> repository.jboss.org and repository.apache.org:
> {noformat}
> [INFO] Downloading from apache.snapshots.https:
> https://repository.apache.org/content/repositories/snapshots/org/apache/apache/24/apache-24.pom
> [INFO] Downloading from repository.jboss.org:
> https://repository.jboss.org/nexus/content/groups/public/org/apache/apache/24/apache-24.pom
> [INFO] Downloading from central:
> https://repo.maven.apache.org/maven2/org/apache/apache/24/apache-24.pom
> [INFO] Downloaded from central:
> https://repo.maven.apache.org/maven2/org/apache/apache/24/apache-24.pom (20
> kB at 140 kB/s){noformat}
> Everything that it needs to download is available in central, so these extra
> requests don't do anything. We should find a way to avoid contacting
> repository.apache.org. One option is to apply a patch to hadoop to
> specifically disable those repositories so that it only uses central.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
