[
https://issues.apache.org/jira/browse/SENTRY-1995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergio Peña updated SENTRY-1995:
--------------------------------
Attachment: SENTRY-1995.1.patch
> Bump Derby dependency version to 10.13.1.1
> ------------------------------------------
>
> Key: SENTRY-1995
> URL: https://issues.apache.org/jira/browse/SENTRY-1995
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 2.0.0
> Reporter: Sergio Peña
> Attachments: SENTRY-1995.1.patch
>
>
> A CVE security issue exists on our current derby dependency 10.10.2.0
> See
> [CVE-2015-1832|https://cve.mitre.org/cgi-bin/cvename.cgi?name=%20CVE-2015-1832].
>
> We should bump the version to the latest one that is 10.13.1.1
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
