[ 
https://issues.apache.org/jira/browse/SENTRY-1997?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16223562#comment-16223562
 ] 

Colm O hEigeartaigh commented on SENTRY-1997:
---------------------------------------------

Looks like it was done by this fix:

https://issues.apache.org/jira/browse/SQOOP-2379
https://issues.apache.org/jira/secure/attachment/12737536/SQOOP-2379.3.patch

>From a Sentry POV, the checkResourceExists method should probably be skipped 
>if the resource is "*" or "all" depending on whether it is a job, link, 
>connector, etc. Is anyone at Sentry also involved with Sqoop? If so could they 
>raise the issue there?

Colm.


> Bump sqoop dependency version to 1.99.7
> ---------------------------------------
>
>                 Key: SENTRY-1997
>                 URL: https://issues.apache.org/jira/browse/SENTRY-1997
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.0.0
>            Reporter: kalyan kumar kalvagadda
>
> A CVE security issue exists on our current SQOOP dependency 1.99.7
> SeeCVE-2009-4269 (H),CVE-2005-4849 (H)
> We should bump the version to the latest one that is 1.99.7



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to