They are related to old CVEs. They provided a way to fix the security issue without having to upgrade Hive. We don't need them in the release mirrors as they are very old and and we have had several releases with the fixes. Owen and I discussed offline, and they been removed from main download location and but are still available in the archive.
On Tue, Mar 27, 2018 at 4:15 PM, Owen O'Malley <owen.omal...@gmail.com> wrote: > Thejas, > > While uploading the new storage api 2.5.0 release into the dist area, I > realized that we had some non-releases in there. Thejas aded "ldap-fix" in > May 2015 and Sushanth added "hive-parent-auth-hook" in Jan 2016. Are they > releases? Are they out of date? > > I also went through the dist area and replaced our old md5 to sha256, so > that we meet the new requirements for checksums. > > Thanks, > Owen
