Does anyone know the release date for Apache Spark 3.3 ? We have log4j vulnerability reported in Apache Spark 3.2.1 version and want to see if the next patch is going to fix it or not.
Regards,
VM
3.3 seems to have gone through some delays but should enter the RC process soon.
Release cadence details are (as of this answer) listed on the Versioning Policy page at https://spark.apache.org/versioning-policy.html
Currently you'll see the following at the bottom:
Spark 3.3 release window
Date
Event
March 15th 2022
Code freeze. Release branch cut.
Late March 2022
QA period. Focus on bug fixes, tests, stability and docs. Generally, no new features merged.
April 2022
Release candidates (RC), voting, etc. until final release passes
So you now know as much as I do. If you want to know more you can follow the mailing list: https://lists.apache.org/list.html?dev#spark.apache.org
If you're by chance using Spark on Databricks, though, they typically release feature updates in the runtime releases before they go to RC in the OSS version.
You mentioned a vulnerability in log4j... CVE-2021-44832 should not exist in the current release Spark 3.2.1. Can you provide more details on what you're seeing in your vulnerability report?
Related
We are still running Magento community version 2.3.4x.
We are upgrading since 4 months to current version, there were many plug-ins not compatible and so on.
Now we are about 2-3 weeks before we can fully switch.
On 11. of Oct. Adobe released:
Security update available for Adobe Commerce | APSB22-48
https://helpx.adobe.com/security/products/magento/apsb22-48.html
But our version of out of service since one month.
So we can not switch now, and there is also no patch.
Adobe Commerce 2.4.5 and earlier versions
What can we do until then?
I know this is not an adequate question here, but since It will probably affect 60% of all Shop worldwide, it's necessary to ask this here.
Maybe try this: https://github.com/EmicoEcommerce/Magento-APSB22-48-Security-Patches
This repository contains Magento 2 Patch Files for the recently found security issues on 12-10-2022. The patch files aim to fix the CVE-2022-35698 and CVE-2022-35689 vulnerabilities.
in the latest release notes for cast sdk it states they shaka player used has been upgraded to v.3.0.10 on march 31st 2021
https://developers.google.com/cast/docs/release-notes
however the js file at
http://www.gstatic.com/cast/sdk/libs/caf_receiver/v3/cast_receiver_framework.js
still loads shaka v2.5.16
the preview version at
https://www.gstatic.com/cast/sdk/libs/caf_receiver/preview/cast_receiver_framework.js
does indeed load shaka v3.0.10
If this has been released then surely the v3 versoin should load v3.0.10 or should i pick up the release version from a new path?
Thanks
J
we found an issue at the last minute of release so had to rollback. We have a fix and the release started to roll out slowly to 100% over the week. Please do join the google group for release notifications/Updates. https://developers.google.com/cast/support#news_and_announcements
I have Googled about the lastest Version of ignite ui. The only info I got is, it is "2018.2". Is there any place where I can find info about Patches stuff. e.g. I have now Infragistic.Web.Mvc.dll Version 5.18.1.40. Is it the latest one ?
The core portion of the product, which is on GitHub, follows the same versioning, as the full version. You can check all the available versions, as well as the latest one here:
https://github.com/IgniteUI/ignite-ui/releases
Here you can see our Service Release Schedule and all upcoming and current releases for all IG products.
Does anyone know the version number for the next production release of Groovy from Codehaus?
groovy-2.4-rc-2 was released a week ago, but I'm not sure whether the production release will have the same version number. The production release of Groovy 1.5 was changed from 1.1 after the final release candidate but before the production release as shown
groovy-binary-1.1-rc-3.zip 28-Nov-2007 06:41 7.3M
groovy-binary-1.5.0.zip 07-Dec-2007 14:18 7.4M
so I don't want to commit to any naming and numbering plans until after the upcoming production release, unless there's someone out there who can give a definitive answer!
Download page is http://groovy.codehaus.org/Download, latest release for production use there 2.3.9. Next production releases are 2.4.0 and 2.3.10
I have a project built around Subsonic 3.0.0.3 and have run into the dreaded medium trust issue, can anyone tell me is there a way I can mod the code myself to get this working or what the expected timescale for 3.1 version is? Its looking increasingly like I will have to ditch subsonic to get my system running
Regards
Mike
No timeframe for SubSonic 3.1 (or 3.0.0.4), but here are the current plans: http://groups.google.com/group/subsonicproject/browse_thread/thread/caae09418ce4d975/
The SubSonic Google discussion group is the best place to find out about the current development happenings for SubSonic.
Short answer, as soon as possible.
Long answer, there's a number of things planned for 3.1 these include (but are not necessarily limited to):
Oracle support
MediumTrust support
Automatic mapping of collections in SimpleRepository
These are all in development right now but before they become the main focus we need to get version 3.0.0.4 out the door with fixes for a lot of the outstanding issues listed on github. There's also a lot of more boring work going on behind the scenes which should make regular and stable releases easier.
The current release schedule is:
Version 3.0.0.4 - 22nd March 2010
Version 3.1 - 22nd May 2010