From issues-return-43609-archive-asf-public=cust-asf.ponee.io@tez.apache.org Wed Jan 27 08:55:02 2021 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mxout1-he-de.apache.org (mxout1-he-de.apache.org [95.216.194.37]) by mx-eu-01.ponee.io (Postfix) with ESMTPS id 913AD180634 for ; Wed, 27 Jan 2021 09:55:02 +0100 (CET) Received: from mail.apache.org (mailroute1-lw-us.apache.org [207.244.88.153]) by mxout1-he-de.apache.org (ASF Mail Server at mxout1-he-de.apache.org) with SMTP id C93E96391D for ; Wed, 27 Jan 2021 08:55:01 +0000 (UTC) Received: (qmail 23637 invoked by uid 500); 27 Jan 2021 08:55:01 -0000 Mailing-List: contact issues-help@tez.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@tez.apache.org Delivered-To: mailing list issues@tez.apache.org Received: (qmail 23628 invoked by uid 99); 27 Jan 2021 08:55:01 -0000 Received: from ec2-52-204-25-47.compute-1.amazonaws.com (HELO mailrelay1-ec2-va.apache.org) (52.204.25.47) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 27 Jan 2021 08:55:01 +0000 Received: from jira2-he-de.apache.org (jira2-he-de.apache.org [168.119.33.54]) by mailrelay1-ec2-va.apache.org (ASF Mail Server at mailrelay1-ec2-va.apache.org) with ESMTPS id EE49B3E978 for ; Wed, 27 Jan 2021 08:55:00 +0000 (UTC) Received: from jira2-he-de.apache.org (localhost.localdomain [127.0.0.1]) by jira2-he-de.apache.org (ASF Mail Server at jira2-he-de.apache.org) with ESMTP id 4BDF9C80291 for ; Wed, 27 Jan 2021 08:55:00 +0000 (UTC) Date: Wed, 27 Jan 2021 08:55:00 +0000 (UTC) From: "Hadoop QA (Jira)" To: issues@tez.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (TEZ-4240) Remove SHA-256 from Tez MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/TEZ-4240?page=3Dcom.atlassian.j= ira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D172726= 88#comment-17272688 ]=20 Hadoop QA commented on TEZ-4240: -------------------------------- | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote || Subsystem || Runtime || Comment || | {color:blue}0{color} | {color:blue} reexec {color} | {color:blue} 15m 23s= {color} | {color:blue} Docker mode activated. {color} | || || || || {color:brown} Prechecks {color} || | {color:green}+1{color} | {color:green} dupname {color} | {color:green} 0= m 0s{color} | {color:green} No case conflicting files found. {color} | | {color:green}+1{color} | {color:green} @author {color} | {color:green} 0= m 0s{color} | {color:green} The patch does not contain any @author tags. {= color} | | {color:red}-1{color} | {color:red} test4tests {color} | {color:red} 0m = 0s{color} | {color:red} The patch doesn't appear to include any new or modi= fied tests. Please justify why no new tests are needed for this patch. Also= please list what manual steps were performed to verify this patch. {color}= | || || || || {color:brown} master Compile Tests {color} || | {color:green}+1{color} | {color:green} mvninstall {color} | {color:green}= 11m 53s{color} | {color:green} master passed {color} | | {color:green}+1{color} | {color:green} compile {color} | {color:green} 0= m 24s{color} | {color:green} master passed {color} | | {color:green}+1{color} | {color:green} checkstyle {color} | {color:green}= 1m 13s{color} | {color:green} master passed {color} | | {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 0= m 39s{color} | {color:green} master passed {color} | | {color:blue}0{color} | {color:blue} spotbugs {color} | {color:blue} 1m 3= 5s{color} | {color:blue} Used deprecated FindBugs config; considering switc= hing to SpotBugs. {color} | | {color:green}+1{color} | {color:green} findbugs {color} | {color:green} = 1m 33s{color} | {color:green} master passed {color} | || || || || {color:brown} Patch Compile Tests {color} || | {color:green}+1{color} | {color:green} mvninstall {color} | {color:green}= 0m 16s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} compile {color} | {color:green} 0= m 16s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} javac {color} | {color:green} 0m = 16s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} checkstyle {color} | {color:green}= 0m 10s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} whitespace {color} | {color:green}= 0m 0s{color} | {color:green} The patch has no whitespace issues. {color}= | | {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 0= m 22s{color} | {color:green} the patch passed {color} | | {color:green}+1{color} | {color:green} findbugs {color} | {color:green} = 0m 57s{color} | {color:green} the patch passed {color} | || || || || {color:brown} Other Tests {color} || | {color:green}+1{color} | {color:green} unit {color} | {color:green} 1m 4= 9s{color} | {color:green} tez-api in the patch passed. {color} | | {color:green}+1{color} | {color:green} asflicense {color} | {color:green}= 0m 16s{color} | {color:green} The patch does not generate ASF License war= nings. {color} | | {color:black}{color} | {color:black} {color} | {color:black} 35m 53s{colo= r} | {color:black} {color} | \\ \\ || Subsystem || Report/Notes || | Docker | ClientAPI=3D1.41 ServerAPI=3D1.41 base: https://ci-hadoop.apache= .org/job/PreCommit-TEZ-Build/96/artifact/out/Dockerfile | | JIRA Issue | TEZ-4240 | | JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/1301947= 7/TEZ-4240.02.patch | | Optional Tests | dupname asflicense javac javadoc unit spotbugs findbugs = checkstyle compile | | uname | Linux 9f0f0f54b390 4.15.0-126-generic #129-Ubuntu SMP Mon Nov 23 = 18:53:38 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux | | Build tool | maven | | Personality | personality/tez.sh | | git revision | master / 7374b69ed | | Default Java | Private Build-1.8.0_275-8u275-b01-0ubuntu1~18.04-b01 | | Test Results | https://ci-hadoop.apache.org/job/PreCommit-TEZ-Build/96/t= estReport/ | | Max. process+thread count | 215 (vs. ulimit of 5500) | | modules | C: tez-api U: tez-api | | Console output | https://ci-hadoop.apache.org/job/PreCommit-TEZ-Build/96/= console | | versions | git=3D2.17.1 maven=3D3.6.0 findbugs=3D3.0.1 | | Powered by | Apache Yetus 0.12.0 https://yetus.apache.org | This message was automatically generated. > Remove SHA-256 from Tez > ----------------------- > > Key: TEZ-4240 > URL: https://issues.apache.org/jira/browse/TEZ-4240 > Project: Apache Tez > Issue Type: Improvement > Affects Versions: 0.9.2 > Reporter: L=C3=A1szl=C3=B3 Bodor > Assignee: L=C3=A1szl=C3=B3 Bodor > Priority: Major > Fix For: 0.10.1, 0.9.3 > > Attachments: TEZ-4240.01.patch, TEZ-4240.02.patch > > > SHA-256 is being deprecated, and it's recommended to be replaced by at le= ast SHA-384. Tez uses SHA-256 for resource validation, and even if it doesn= 't seem to be a direct vulnerability, it's better to upgrade it in order to= remain FIPS compliant. -- This message was sent by Atlassian Jira (v8.3.4#803005)