[
https://issues.apache.org/jira/browse/SENTRY-1994?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16206756#comment-16206756
]
Hadoop QA commented on SENTRY-1994:
-----------------------------------
Here are the results of testing the latest attachment
https://issues.apache.org/jira/secure/attachment/12892467/SENTRY-1994.1.patch
against master.
{color:green}Overall:{color} +1 all checks pass
{color:green}SUCCESS:{color} all tests passed
Console output:
https://builds.apache.org/job/PreCommit-SENTRY-Build/3352/console
This message is automatically generated.
> Bump Shiro dependency version to 1.4.0
> --------------------------------------
>
> Key: SENTRY-1994
> URL: https://issues.apache.org/jira/browse/SENTRY-1994
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 2.0.0
> Reporter: Sergio Peña
> Assignee: Sergio Peña
> Attachments: SENTRY-1994.1.patch
>
>
> A CVE security issue exists on our current shiro dependency 1.2.3
> See
> [CVE-2016-4437|https://cve.mitre.org/cgi-bin/cvename.cgi?name=%20CVE-2016-4437].
>
> We should bump the version to the latest one tha is 1.4.0
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
