Commit Graph

88 Commits

Author SHA1 Message Date
Kevin Cai 62ea12772b
[BugFix][CVE-2025-58056] bump io.netty version to 4.1.125.Final (#62801)
Signed-off-by: Kevin Cai <kevin.cai@celerdata.com>
2025-09-07 12:31:39 +08:00
Kevin Cai c559d6905b
[BugFix][CVE] CVE-2025-55163 fix, bump io.netty version (#62041)
Signed-off-by: Kevin Cai <kevin.cai@celerdata.com>
2025-08-19 11:09:31 +08:00
Kevin Cai 8e943031c5
[BugFix] cleanup broker CVEs (#60908)
Signed-off-by: Kevin Cai <kevin.cai@celerdata.com>
2025-07-15 10:12:17 +08:00
Binglin Chang 086c245387
[Enhancement] Remove junit4 code and dependency (#60477)
Signed-off-by: Binglin Chang <decstery@gmail.com>
2025-07-03 17:21:02 +08:00
gengjun-git 3c4a12b663
[Enhancement] Fix CVE-2022-41404 (#59689)
Signed-off-by: gengjun-git <gengjun@starrocks.com>
2025-06-11 09:30:50 +08:00
wyb cf41f53066
[Enhancement] Remove cloudera6 log4j from broker (#59579)
Signed-off-by: wyb <wybb86@gmail.com>
2025-06-04 14:06:57 +08:00
Felix Li fbe4211043
[Enhancement] Upgrade tomcat to 9.0.99 due to CVE-2025-24813 (#58505)
Signed-off-by: Astralidea <astralidea@163.com>
2025-04-28 19:28:36 +08:00
Vikas Attiguppa 8fe3bea3c7
[Enhancement] Fixing Vulnerability (#58425)
Signed-off-by: Vikas Attiguppa <20652333+va-os-commits@users.noreply.github.com>
2025-04-27 09:41:26 +08:00
wyb 707c441bd3
[Enhancement] Fix broker CVEs (#57620)
Signed-off-by: wyb <wybb86@gmail.com>
2025-04-03 16:20:56 +08:00
wyb 6e5e5947b4
[BugFix] Fix local file rename in broker (#52544)
Signed-off-by: wyb <wybb86@gmail.com>
2024-11-01 13:25:46 -07:00
Vikas Attiguppa a22f1151ee
[Enhancement] Adding exclusions for libraries to fix CVEs (#50283)
Signed-off-by: Vikas Attiguppa <vikas.as@gmail.com>
2024-09-11 15:56:50 +08:00
Xueyan Li 88215d6c6e
[Enhancement] Security Fixes (#49304)
Signed-off-by: Astralidea <astralidea@163.com>
2024-08-02 11:07:37 +08:00
Xueyan Li 9cb887c707
[Enhancement] Security Fixes (#49217)
Signed-off-by: Astralidea <astralidea@163.com>
2024-07-31 16:21:23 +08:00
Xueyan Li c98782e070
[Enhancement] Broker Security Updates (#48616)
Signed-off-by: Astralidea <astralidea@163.com>
2024-07-19 15:47:53 +08:00
wyb 56f61aa2f6
[Enhancement] Remove jindo sdk from broker (#47993)
Why I'm doing:
jindo sdk was removed from FE in pr #46297

What I'm doing:
hadoop-aliyun is already in broker-core/pom.xml, remove jindo sdk from broker
remove useless hadoop-cos dependency description in pom.xml

Signed-off-by: wyb <wybb86@gmail.com>
2024-07-08 09:39:32 -07:00
wyb 96e44d4d9e
[Feature] Broker support COS posix bucket (#46597)
Signed-off-by: wyb <wybb86@gmail.com>
2024-06-06 10:34:47 +08:00
wyb 3a8dee9f8b
[BugFix] Revert "[Feature] Broker support COS posix bucket (#42638)" (#46425) 2024-05-29 21:32:17 +08:00
ricky 230b5f2a40
[BugFix] Add broker dependency hadoop-aliyun/hadoop-ks3 (#46162)
Signed-off-by: ricky <rickif@qq.com>
2024-05-28 10:25:55 +08:00
ricky 5b1cebbf48
[Feature] Broker support COS posix bucket (#42638)
Signed-off-by: ricky <rickif@qq.com>
2024-05-23 02:04:06 +00:00
wyb 4b47b42c12
[Enhancement] Improve kerberos tmp keytab file permission (#40572)
Signed-off-by: wyb <wybb86@gmail.com>
2024-02-04 10:36:05 +08:00
Felix Li cf0927a197
[Enhancement] Upgrade tomcat due to CVE-2023-46589 (#37612)
Signed-off-by: Astralidea <astralidea@163.com>
2023-12-22 11:31:05 +08:00
Felix Li 7a0c04af02
[Enhancement] Remove Unused htrace in broker (#34505)
Signed-off-by: Astralidea <astralidea@163.com>
2023-11-07 11:10:47 +00:00
Felix Li 61ef776941
[Enhancement] Upgrade zookeeper to 3.9.1 due to CVE-2023-44981 (#32547)
Signed-off-by: Astralidea <astralidea@163.com>
2023-10-11 21:11:19 -05:00
Felix Li 9aa2bc4941
[Enhancement] Upgrade tomcat to 8.5.93 due to CVE-2023-41080 (#32374)
Signed-off-by: Astralidea <astralidea@163.com>
2023-10-10 14:50:19 +08:00
Letian Jiang 6a792a3fcb
[Feature] Support Tencent cos filesystem (#31758)
Signed-off-by: Letian Jiang <letian.jiang@outlook.com>
2023-10-09 19:33:02 +08:00
Felix Li 8fe2adb8d4
[Enhancement] Use new version zk to remove old netty dependency (#31491)
Signed-off-by: Astralidea <astralidea@163.com>
2023-09-20 17:36:27 +08:00
Felix Li 588aa459bc
[Enhancement] Use cloudera's security fixes log4j 1.2.17 (#28866)
Signed-off-by: Astralidea <astralidea@163.com>
2023-08-08 20:17:01 +08:00
Zhenxiao Luo 54d0f54a52
[Enhancement] User friendly error message when AWS parseRegion gets error (#27498)
User friendly error message when AWS parseRegion gets error
2023-07-25 10:25:27 +08:00
Felix Li 2918b4ac8f
[Enhancement] Upgrade hadoop to 3.3.6 due to security (#26905)
Fixes #issue

Signed-off-by: Astralidea <astralidea@163.com>
2023-07-10 20:40:07 +08:00
BlankLin 3a57f9a44c
[Enhancement] broker support multiple name services (#23510)
Fixes #23509

Signed-off-by: blanklin030 <luis01@foxmail.com>
2023-07-04 14:04:49 +08:00
Felix Li 6eaec91d0f
[Enhancement] Upgrade tomcat to 8.5.88 due to CVE-2023-28709 (#26312)
Fixes #issue

Signed-off-by: Astralidea <astralidea@163.com>
2023-06-30 16:49:30 +08:00
Felix Li 2adf5531f3
[Enhancement] upgrade guava to 32.0.1 due to CVE-2023-2976 (#25300)
Signed-off-by: Astralidea <astralidea@163.com>
2023-06-15 12:44:05 +08:00
miomiocat bec9039df8
[BugFix] Support for using core-site.xml if load properties are not set in old broker load (#24804)
If there is no properties in the broker load command, it should roll
back to read the core-site.xml to apply.

Signed-off-by: miomiocat <284487410@qq.com>
2023-06-07 16:35:29 +08:00
Felix Li 8175f50d93
Upgrade jackson Due to CVE-2022-42003 (#21176)
Signed-off-by: Astralidea <astralidea@163.com>
2023-04-07 22:00:32 +08:00
jay 4ac833c300
Support Broker Load/Export Table from volcengine tos (#17027)
Signed-off-by: jukejian <jukejian@bytedance.com>

# Conflicts:
#	thirdparty/build-thirdparty.sh
2023-02-28 20:25:04 +08:00
rickif 3f77feb107
Fix: typo in log of broker (#17471)
Signed-off-by: rickif <rickif@qq.com>
2023-02-06 19:16:50 -08:00
miomiocat db19fc4454
[Refactor] Use thirdparty jar packages as the source of broker dependency (#17222)
Signed-off-by: miomiocat <284487410@qq.com>
2023-02-06 12:39:39 +08:00
xyz 33d56ceac3
[Refactor] optimize jindosdk decompress procedure (#17028)
Currently, we will decompress jindosdk-4.6.2.tar.gz when building broker,
this is very time consuming.

In this pr, we optimize this procedure, jindosdk-4.6.2.tar.gz will
only be decompressed in the first time it downloads.

Signed-off-by: xyz <a997647204@gmail.com>
2023-01-30 14:13:19 +08:00
xyz ce2909036a
[Enhancement] support broker load from azure abfs (#16760)
In this pr, we support broker load from azure abfs.
We remove the check of path prefix in getFileSystem, if the path prefix is not hdfs/s3a/oss/cos...,
we will try to create a generic file system. The reason why we can do this is because hadoop/s3 SDK
is compatible with all file/object storage system.
Then if in future, if there is a request for supporting new file system,
we only need to add the settings in hdfs-site.xml, core-site.xml of BE/FE, and the jar lib in the specific place.

Signed-off-by: xyz <a997647204@gmail.com>
2023-01-29 16:46:17 +08:00
xyz 0d8cc7b075
[Enhancement] Upgrade broker's aliyun-sdk from 2.7.2 to jindosdk-4.6.2 (#16935) 2023-01-29 03:31:33 +08:00
xyz b394d1e04a
[BugFix] broker hung when closing oss file (#16648)
In some cases, broker may hang when closing oss file,
this will lead to all following open/write requests stuck.
Here we disable the check_client_expiration_task temporarily,
after oss bug is fixed, we can turn on the flag again.

This problem may be introduced by #15606
2023-01-16 21:41:50 -08:00
zuyu 558281e00f
[Refactor] Removed outdated log4j 1.2 (#16270) 2023-01-05 13:52:17 -08:00
gengjun-git 51094916a0
[BugFix] Fix broker kerberos ticket timeout bug when there are broker load continuously (#16131)
The current broker has two types of kerberos token, one is the global, one unique to each HDFS client, access to HDFS will use each client unique token, and access to other components (such as kms) use the global. HDFS client unique token is not automatically refreshed, but HDFS client in the broker has an expiration time, if more than 5min is not used, the HDFS client will be destroyed. If there is a request the next time, a new client will be created, the kerberos login will be executed again, this is actually an indirect refresh token. But if there are access continuously, HDFS client will never be rebuilt, then the token will not be refreshed, it will time out after 1 day.
To fix this bug, destroy the client before token is expired.
2023-01-03 20:56:09 +08:00
lichaoyong 86ac0877ac
[License] Change Elastic License to Apache License 2.0 (#14744) 2022-12-06 10:50:55 -08:00
lichaoyong 9e2f789145
[License] Change Elastic License to Apache License 2.0 (#14666) 2022-12-05 17:39:08 -08:00
Jiacheng Yang 9f804e518a
[Feature] Support pathStyleAccess for broker load (#14569)
Add a new broker config option `"fs.s3a.path.style.access"` to allow toggling the path style. The option value must either be "true" or "false". Default value is "false".

```
WITH BROKER "broker1"
(
  "fs.s3a.access.key" = "myaccesskey",
  "fs.s3a.secret.key" = "mysecretkey",
  "fs.s3a.endpoint" = "host.testcontainers.internal:49651"
  "fs.s3a.path.style.access" = "true"
)
```
2022-12-04 12:20:58 -08:00
rickif 8a9722558a
[Enhancement] Remove access info in broker log (#13329) 2022-11-29 12:44:15 +08:00
miomiocat 00b0988905
[BugFix] fix a import error of broker module (#13934) 2022-11-22 23:50:37 -08:00
lichaoyong 67d78bf75b
[BugFix] Enlarge the default backlog of thrift in broker (#13871)
The default backlog of thrift listen is 50. The number is small
to confront the high batch load. I change the default value to 1024.
2022-11-23 11:44:36 +08:00
gengjun-git 401ced33b1
[BugFix] Fix broker kerberos ticket expired bug (#12944)
Set hadoop.kerberos.keytab.login.autorenewal.enabled to true to enable auth refresh ticket.
2022-11-14 19:03:46 +08:00