Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-9649

Exclude shiro-crypto-core and shiro-core jars from maven download

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • Impala 4.0.0
    • Impala 4.0.0
    • Frontend
    • None
    • ghx-label-9

    Description

      These jars have known security vulnerabilities. They are included as part of Sentry, and are not used by Impala directly.

      There's a currently a plan to remove Sentry altogether, but since will require non-trivial effort, until that time, let's exclude these items from the maven download.

      Attachments

        Activity

          People

            dknupp David Knupp
            dknupp David Knupp
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: