Impala Public Jenkins has submitted this change and it was merged. ( 
http://gerrit.cloudera.org:8080/15720 )

Change subject: IMPALA-9649: Exclude shiro-core and shiro-crypto-core jars from 
maven download
......................................................................

IMPALA-9649: Exclude shiro-core and shiro-crypto-core jars from maven download

These jars have known security vulnerabilities. They are included as part of
Sentry, and are not used by Impala directly.

There's a currently a plan to remove Sentry altogether, but since this will
require non-trivial effort, until that time, let's exclude these items from
the maven download.

Change-Id: I4ef8203fb31b200b7480a11e148a833f4129dafc
Reviewed-on: http://gerrit.cloudera.org:8080/15720
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
---
M fe/pom.xml
1 file changed, 10 insertions(+), 0 deletions(-)

Approvals:
  Impala Public Jenkins: Looks good to me, approved; Verified

--
To view, visit http://gerrit.cloudera.org:8080/15720
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I4ef8203fb31b200b7480a11e148a833f4129dafc
Gerrit-Change-Number: 15720
Gerrit-PatchSet: 5
Gerrit-Owner: David Knupp <[email protected]>
Gerrit-Reviewer: David Knupp <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Joe McDonnell <[email protected]>
Gerrit-Reviewer: Tim Armstrong <[email protected]>

Reply via email to