Re: CVE-2016-3083: Apache Hive SSL vulnerability bug disclosure

Thanks much. Ying On Tue, May 30, 2017 at 1:07 PM, Thejas Nair wrote: > It went in under guise of the jira - HIVE-13390. > Commit - https://github.com/apache/hive/commit/ > 3b2ea248078bdf3a8372958cf51a989dc3883bcc > > On Tue, May 30, 2017 at 12:35 PM, Ying Chen wrote: > >> Hello - >> Was there

Re: CVE-2016-3083: Apache Hive SSL vulnerability bug disclosure

It went in under guise of the jira - HIVE-13390. Commit - https://github.com/apache/hive/commit/3b2ea248078bdf3a8372958cf51a989dc3883bcc On Tue, May 30, 2017 at 12:35 PM, Ying Chen wrote: > Hello - > Was there a particular JIRA(s) that went into Hive 1.2.2 that fixed this > issue? > Thanks much.

Re: CVE-2016-3083: Apache Hive SSL vulnerability bug disclosure

Hello - Was there a particular JIRA(s) that went into Hive 1.2.2 that fixed this issue? Thanks much. Ying On Wed, May 24, 2017 at 3:56 PM, Vaibhav Gumashta wrote: > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: > Apache Hive 0.13.x > Apache Hive 0.14.x >

CVE-2016-3083: Apache Hive SSL vulnerability bug disclosure

Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Hive 0.13.x Apache Hive 0.14.x Apache Hive 1.0.0 - 1.0.1 Apache Hive 1.1.0 - 1.1.1 Apache Hive 1.2.0 - 1.2.1 Apache Hive 2.0.0 Description: Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP