Re: hive dist area questions

2018-03-28 Thread Thejas Nair
They are related to old CVEs. They provided a way to fix the security issue without having to upgrade Hive. We don't need them in the release mirrors as they are very old and and we have had several releases with the fixes. Owen and I discussed offline, and they been removed from main download

hive dist area questions

2018-03-27 Thread Owen O'Malley
Thejas, While uploading the new storage api 2.5.0 release into the dist area, I realized that we had some non-releases in there. Thejas aded "ldap-fix" in May 2015 and Sushanth added "hive-parent-auth-hook" in Jan 2016. Are they releases? Are they out of date? I also went through the dist