Thanks to visit codestin.com
Credit goes to github.com

Skip to content

HADOOP-19730. Upgrade Bouncycastle to 1.82 due to CVE-2025-8916 #8039

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 21, 2025
Merged

HADOOP-19730. Upgrade Bouncycastle to 1.82 due to CVE-2025-8916 #8039

merged 1 commit into from
Oct 21, 2025

Conversation

@pjfanning
Copy link
Member

@pjfanning pjfanning commented Oct 19, 2025 •
edited
Loading

Description of PR

HADOOP-19730

CVE-2025-8916

How was this patch tested?

For code changes:

  • Does the title or this PR starts with the corresponding JIRA issue id (e.g. 'HADOOP-17799. Your PR title ...')?
  • Object storage: have the integration tests been executed and the endpoint declared according to the connector-specific documentation?
  • If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?
  • If applicable, have you updated the LICENSE, LICENSE-binary, NOTICE-binary files?

@pjfanning pjfanning changed the title HADOOP-19730. Upgrade Bouncycastle to 1.79 due to CVE-2025-8916 HADOOP-19730. Upgrade Bouncycastle to 1.82 due to CVE-2025-8916 Oct 19, 2025
@hadoop-yetus
Copy link

💔 -1 overall

Vote Subsystem Runtime Logfile Comment
+0 🆗 reexec 20m 22s Docker mode activated.
_ Prechecks _
+1 💚 dupname 0m 0s No case conflicting files found.
+0 🆗 codespell 0m 0s codespell was not available.
+0 🆗 detsecrets 0m 0s detect-secrets was not available.
+0 🆗 markdownlint 0m 0s markdownlint was not available.
+0 🆗 xmllint 0m 0s xmllint was not available.
+0 🆗 shelldocs 0m 1s Shelldocs was not available.
+1 💚 @author 0m 0s The patch does not contain any @author tags.
-1 ❌ test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
_ trunk Compile Tests _
+0 🆗 mvndep 7m 51s Maven dependency ordering for branch
+1 💚 mvninstall 28m 35s trunk passed
+1 💚 compile 15m 12s trunk passed with JDK Ubuntu-21.0.7+6-Ubuntu-0ubuntu120.04
+1 💚 compile 15m 28s trunk passed with JDK Ubuntu-17.0.15+6-Ubuntu-0ubuntu120.04
-1 ❌ mvnsite 8m 58s /branch-mvnsite-root.txt root in trunk failed.
+1 💚 javadoc 9m 36s trunk passed with JDK Ubuntu-21.0.7+6-Ubuntu-0ubuntu120.04
+1 💚 javadoc 8m 36s trunk passed with JDK Ubuntu-17.0.15+6-Ubuntu-0ubuntu120.04
+1 💚 shadedclient 43m 37s branch has no errors when building and testing our client artifacts.
_ Patch Compile Tests _
+0 🆗 mvndep 0m 33s Maven dependency ordering for patch
+1 💚 mvninstall 27m 23s the patch passed
+1 💚 compile 14m 49s the patch passed with JDK Ubuntu-21.0.7+6-Ubuntu-0ubuntu120.04
+1 💚 javac 14m 49s the patch passed
+1 💚 compile 15m 37s the patch passed with JDK Ubuntu-17.0.15+6-Ubuntu-0ubuntu120.04
+1 💚 javac 15m 37s the patch passed
+1 💚 blanks 0m 0s The patch has no blanks issues.
-1 ❌ mvnsite 7m 1s /patch-mvnsite-root.txt root in the patch failed.
+1 💚 shellcheck 0m 0s No new issues.
+1 💚 javadoc 9m 42s the patch passed with JDK Ubuntu-21.0.7+6-Ubuntu-0ubuntu120.04
+1 💚 javadoc 8m 36s the patch passed with JDK Ubuntu-17.0.15+6-Ubuntu-0ubuntu120.04
+1 💚 shadedclient 45m 37s patch has no errors when building and testing our client artifacts.
_ Other Tests _
-1 ❌ unit 807m 40s /patch-unit-root.txt root in the patch passed.
+1 💚 asflicense 1m 36s The patch does not generate ASF License warnings.
1064m 10s
Reason Tests
Failed junit tests hadoop.hdfs.server.datanode.fsdataset.impl.TestFsVolumeList
hadoop.hdfs.tools.TestDFSAdmin
hadoop.hdfs.server.namenode.ha.TestStandbyCheckpoints
hadoop.hdfs.server.balancer.TestBalancerWithHANameNodes
hadoop.hdfs.TestRollingUpgrade
hadoop.yarn.sls.appmaster.TestAMSimulator
hadoop.yarn.server.router.subcluster.fair.TestYarnFederationWithFairScheduler
hadoop.yarn.server.router.webapp.TestFederationWebApp
hadoop.yarn.server.router.webapp.TestRouterWebServicesREST
hadoop.yarn.server.nodemanager.containermanager.logaggregation.TestLogAggregationService
hadoop.yarn.service.TestYarnNativeServices
Subsystem Report/Notes
Docker ClientAPI=1.51 ServerAPI=1.51 base: https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-8039/1/artifact/out/Dockerfile
GITHUB PR #8039
Optional Tests dupname asflicense mvnsite codespell detsecrets markdownlint compile javac javadoc mvninstall unit shadedclient xmllint shellcheck shelldocs
uname Linux 66cf96c27f49 5.15.0-156-generic #166-Ubuntu SMP Sat Aug 9 00:02:46 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool maven
Personality dev-support/bin/hadoop.sh
git revision trunk / 695a0a3
Default Java Ubuntu-17.0.15+6-Ubuntu-0ubuntu120.04
Multi-JDK versions /usr/lib/jvm/java-21-openjdk-amd64:Ubuntu-21.0.7+6-Ubuntu-0ubuntu120.04 /usr/lib/jvm/java-17-openjdk-amd64:Ubuntu-17.0.15+6-Ubuntu-0ubuntu120.04
Test Results https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-8039/1/testReport/
Max. process+thread count 4498 (vs. ulimit of 5500)
modules C: hadoop-project hadoop-cloud-storage-project/hadoop-cos . U: .
Console output https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-8039/1/console
versions git=2.25.1 maven=3.9.11 shellcheck=0.7.0
Powered by Apache Yetus 0.14.0 https://yetus.apache.org

This message was automatically generated.

@slfan1989 slfan1989 merged commit b1d6f04 into apache:trunk Oct 21, 2025
1 of 5 checks passed
@slfan1989
Copy link
Contributor

@pjfanning Thanks for the contribution! Merged into trunk. Could we also open a PR for branch-3.4?

@pjfanning pjfanning deleted the HADOOP-19730-bc branch October 23, 2025 00:15
pjfanning added a commit to pjfanning/hadoop that referenced this pull request Oct 23, 2025
@pjfanning
HADOOP-19730. Upgrade Bouncycastle to 1.82 due to CVE-2025-8916 (apac…
c8b8fb4 
…he#8039) Contributed by PJ Fanning

* HADOOP-19730. Upgrade Bouncycastle to 1.82 due to CVE-2025-8916

Signed-off-by: Shilun Fan <[email protected]>
@pjfanning pjfanning mentioned this pull request Oct 23, 2025
Merged
4 tasks
slfan1989 pushed a commit that referenced this pull request Oct 27, 2025
@pjfanning
HADOOP-19730. Upgrade Bouncycastle to 1.82 due to CVE-2025-8916 (#8047)…
ef5627d 
… Contributed by PJ Fanning

* HADOOP-19730. Upgrade Bouncycastle to 1.82 due to CVE-2025-8916 (#8039) 

Signed-off-by: Shilun Fan <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@slfan1989 slfan1989 slfan1989 approved these changes

Assignees

No one assigned

Labels

build trunk

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@pjfanning @hadoop-yetus @slfan1989