Apache
/
druid
mirror of https://github.com/apache/druid.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
9,995 Commits 111 Branches 503 Tags 721 MiB
Commit Graph

26 Commits

Author SHA1 Message Date
Chi Cao Minh 8365bdf62a Address security vulnerabilities (#8878) 
* Address security vulnerabilities

Security vulnerabilities addressed by upgrading 3rd party libs:

- Upgrade avro-ipc to 1.9.1
  - sonatype-2019-0115
- Upgrade caffeine to 2.8.0
  - sonatype-2019-0282
- Upgrade commons-beanutils to 1.9.4
  - CVE-2014-0114
- Upgrade commons-codec to 1.13
  - sonatype-2012-0050
- Upgrade commons-compress to 1.19
  - CVE-2019-12402
  - sonatype-2018-0293
- Upgrade hadoop-common to 2.8.5
  - CVE-2018-11767
- Upgrade hadoop-mapreduce-client-core to 2.8.5
  - CVE-2017-3166
- Upgrade hibernate-validator to 5.2.5
  - CVE-2017-7536
- Upgrade httpclient to 4.5.10
  - sonatype-2017-0359
- Upgrade icu4j to 55.1
  - CVE-2014-8147
- Upgrade jackson-databind to 2.6.7.3:
  - CVE-2017-7525
- Upgrade jetty-http to 9.4.12:
  - CVE-2017-7657
  - CVE-2017-7658
  - CVE-2017-7656
  - CVE-2018-12545
- Upgrade log4j-core to 2.8.2
  - CVE-2017-5645:
- Upgrade netty to 3.10.6
  - CVE-2015-2156
- Upgrade netty-common to 4.1.42
  - CVE-2019-9518
- Upgrade netty-codec-http to 4.1.42
  - CVE-2019-16869
- Upgrade nimbus-jose-jwt to 4.41.1
  - CVE-2017-12972
  - CVE-2017-12974
- Upgrade plexus-utils to 3.0.24
  - CVE-2017-1000487
  - sonatype-2015-0173
  - sonatype-2016-0398
- Upgrade postgresql to 42.2.8
  - CVE-2018-10936

Note that if users are using JDBC lookups with postgres, they may need
to update the JDBC jar used by the lookup extension.

* Fix license for postgresql
 2019-11-19 09:14:33 -08:00
Clint Wylie ff26fcb159 add copyright info back to NOTICE and NOTICE.BINARY (#8298) 
* add Apache copyrights back to NOTICE per https://lists.apache.org/thread.html/4e296f3ede34aa5aeb0b2a8ed0f3540b320bce07936aa3c8bfa135b3@%3Cgeneral.incubator.apache.org%3E

* fixup notice.binary

* now with 3x the hive notices

* less redundant
 2019-08-14 19:42:47 -05:00
Jihoon Son 9d925f5086 Adjust NOTICE files (#7945) 
* Adjust NOTICE files

* remove commons-logging

* Remove lucene from derby

* more adjustment
 2019-06-25 09:08:54 -07:00
Jihoon Son 2bf44eb0b4 Missing licenses and notices for source distribution (#7760) 
* Add missing licenses and notices

* address comment
 2019-05-24 14:47:41 -07:00
Jonathan Wei c17f4bbad8 Fix 0.14.0 rc1 voting issues (#7284) 2019-03-18 14:16:21 -07:00
Jonathan Wei 5486c2abf8
Update LICENSE and NOTICE files (#7026) 
* Update LICENSE and NOTICE files

* Update react-table version
 2019-03-04 18:45:22 -08:00
Jonathan Wei 68f744ec0a
Fixed buckets histogram aggregator (#6638) 
* Fixed buckets histogram aggregator

* PR comments

* More PR comments

* Checkstyle

* TeamCity

* More TeamCity

* PR comment

* PR comment

* Fix doc formatting
 2019-01-17 14:51:16 -08:00
Jihoon Son a7391b396b Copy splitToList from Guava (#6800) 
* Copy splitToList from Guava

* add comment

* fix commit tag
 2019-01-03 18:42:13 +08:00
Clint Wylie c2f020eacc fix druid-bloom-filter thread-safety (#6584) 
* use BloomFilter instead of BloomKFilter since the latters test method is not threadsafe

* fix formatting

* style and forbidden api

* remove redundant hive notice entry

* add todo with note to delete copied implementation and link to related hive jira

* better fix for masks than ThreadLocal
 2018-11-09 10:55:17 -08:00
David Lim f8710c8e20 add DISCLAIMER file and modify NOTICE file for ASF (#6475) 
* add DISCLAIMER file and modify NOTICE file for ASF

* add line breaks
 2018-10-17 08:36:13 -07:00
Jonathan Wei 24f2e8ba26 New quickstart and tutorials (#6126) 
* New quickstart and tutorials

* PR comments

* Fix tranquility
 2018-08-09 14:37:52 -06:00
Jonathan Wei c2a0e753b6 Extension points for authentication/authorization (#4271) 
* Extension points for authentication/authorization

* Address some PR comments

* Authorization result caching

* Add unit tests for SecuritySanityCheckFilter and PreResponseAuthorizationCheckFilter

* Use Set for auth caching, close outputstreams in filters

* Don't close output stream on success in sanity check filter

* Add ConfigResourceFilter to coordinator lookups

* Fix filtering authorization check for empty resource list

* HttpClient users must explicitly escalate the client

* Remove response modification from PreResponseAuthorizationCheckFilter

* Remove extraneous pom.xml

* Fix unit test

* Better lifecycle management

* Rename AuthorizationManager to Authorizer

* Fix authorization denials for empty supervisor list

* Address some PR comments

* Address more PR comments

* Small cleanup

* Add Jetty HttpClient wrapper to Authenticator

* Remove Authorizer start/stop

* Restore immutable context map in DruidConnection, UT fix

* Fix/update docs

* Add authorization checks to EventReceiverFirehose

* Fix router authorization check failure, restore PreResponseAuthorizationFilter changes

* Compile fixes

* Test fixes

* Update Authenticator/Authorizer doc comments

* Merge fixes

* PR comments

* Fix test

* Fix IT

* More PR comments

* PR comments

* SSL fix
 2017-09-15 23:45:48 -07:00
Roman Leventov 15f3a94474 Copy closer into Druid codebase (fixes #3652) (#4153) 2017-04-10 09:38:45 +09:00
Akash Dwivedi dd0c4e2ead Migrating extendedset from Metamarkets. (#3694) 
* Migrating extendedset from Metamarkets.

* Notice change

* More details in NOTICE

* NOTICE formatting.

* suppress header checkstlye for extendedset.
 2017-01-17 10:10:27 -08:00
Gian Merlino dd63f54325 Built-in SQL. (#3682) 2016-12-16 17:15:59 -08:00
Akash Dwivedi 3e408497b3 Migrating bytebuffercollections from Metamarkets. (#3647) 
* Migrating  bytebuffercollections from Metamarkets.

* resolving code conflicts and removing <p> from bytebuffer-collections.
 2016-11-11 10:51:07 -08:00
Gian Merlino 2bbbad9908 Add NOTICE for TestNG code. (#3661) 2016-11-04 12:54:52 -07:00
Akash Dwivedi 4b3bd8bd63 Migrating java-util from Metamarkets. (#3585) 
* Migrating java-util from Metamarkets.

* checkstyle and updated license on java-util files.

* Removed unused imports from whole project.

* cherry pick metamx/java-util@826021f.

* Copyright changes on java-util pom, address review comments.
 2016-10-21 14:57:07 -07:00
Dave Li c4e8440c22 Adds long compression methods (#3148) 
* add read

* update deprecated guava calls

* add write and vsizeserde

* add benchmark

* separate encoding and compression

* add header and reformat

* update doc

* address PR comment

* fix buffer order

* generate benchmark files

* separate encoding strategy and format

* fix benchmark

* modify supplier write to channel

* add float NONE handling

* address PR comment

* address PR comment 2
 2016-08-30 16:17:46 -07:00
Jonathan Wei 1e3979a5e8 Add variance aggregator from hive to NOTICE (#3327) 2016-08-04 17:43:55 -07:00
Jonathan Wei 24860a1391 Two-stage filtering (#3018) 
* Two-stage filtering

* PR comment
 2016-06-22 16:08:21 -07:00
fjy 7da6594bfe more doc fixes 2016-02-17 09:43:47 -08:00
Charles Allen d8505a6ccc Happy 2016! 2016-01-06 09:22:42 -08:00
Himanshu Gupta 126262edce support for PasswordProvider interface to enable writing druid extension which can get metadata store password from secured location or anywhere instead of plain text properties file 2015-02-25 14:05:19 -06:00
Xavier Léauté 0fbc6071c9 update code attribution 2015-02-04 15:28:44 -08:00
Eric Tschetter 42eba986ce Towards consistent null handling 
This commit also includes
1) the addition of a context parameter on timeseries queries that allows it to ignore empty buckets instead of generating results for them
2) A cleanup of an unused method on an interface
 2015-02-02 12:53:07 -08:00