Skip to content

chore/CVE-2022-1471 #675

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
May 27, 2024
Merged

chore/CVE-2022-1471 #675

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
f1b529e
bump omid and jruby versions for CVE-2022-1471 fix
xeniape May 15, 2024
d974a96
linting fixes
xeniape May 15, 2024
b2781d3
bump phoenix version, revert patch changes
xeniape May 21, 2024
393874e
typo fix
xeniape May 21, 2024
521fd19
remove jruby version bump
xeniape May 21, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion conf.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,7 @@
"java-base": "11",
"java-devel": "11",
"async_profiler": "2.9",
"phoenix": "5.1.3",
"phoenix": "5.2.0",
"hbase_profile": "2.4",
"hadoop": "3.3.6",
"jmx_exporter": "0.20.0",
Expand Down
12 changes: 6 additions & 6 deletions hbase/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,12 +27,12 @@ WORKDIR /stackable

# The release scripts of HBase also run the build twice (three times in fact, once again to build the site which we skip here).
# I chose to replicate that exact behavior for consistency so please don't merge the two mvn runs into one unless you really know what you're doing!
RUN curl --fail -L "https://repo.stackable.tech/repository/packages/hbase/hbase-${PRODUCT}-src.tar.gz" | tar -xzC .
RUN mv hbase-${PRODUCT} hbase-${PRODUCT}-src
RUN curl --fail -L "https://repo.stackable.tech/repository/packages/hbase/hbase-${PRODUCT}-src.tar.gz" | tar -xzC . && \
mv hbase-${PRODUCT} hbase-${PRODUCT}-src
COPY --chown=stackable:stackable hbase/stackable/patches /stackable/patches
RUN chmod +x patches/apply_patches.sh
RUN patches/apply_patches.sh ${PRODUCT}
RUN cd /stackable/hbase-${PRODUCT}-src/ && \
RUN chmod +x patches/apply_patches.sh && \
patches/apply_patches.sh ${PRODUCT} && \
cd /stackable/hbase-${PRODUCT}-src/ && \
mvn -Dhadoop.profile=3.0 -Dhadoop-three.version=${HADOOP} clean install -DskipTests && \
mvn -Dhadoop.profile=3.0 -Dhadoop-three.version=${HADOOP} install assembly:single -DskipTests -Dcheckstyle.skip=true -Prelease && \
tar -xzf hbase-assembly/target/hbase-${PRODUCT}-bin.tar.gz -C /stackable/ && \
Expand Down Expand Up @@ -164,7 +164,7 @@ RUN ln -s /stackable/hbase-${PRODUCT} /stackable/hbase && \
USER stackable
ENV HBASE_CONF_DIR=/stackable/hbase/conf
ENV HOME=/stackable
ENV PATH="${PATH}":/stackable/bin:/stackable/hbase/bin
ENV PATH="${PATH}:/stackable/bin:/stackable/hbase/bin"
ENV ASYNC_PROFILER_HOME=/stackable/async-profiler

# Mitigation for CVE-2021-44228 (Log4Shell)
Expand Down