You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Ray Donnelly (JIRA)" <ji...@apache.org> on 2018/05/09 22:40:00 UTC

[jira] [Created] (SPARK-24229) Upgrade to the latest Apache Thrift 0.10.0 release

Ray Donnelly created SPARK-24229:
------------------------------------

             Summary: Upgrade to the latest Apache Thrift 0.10.0 release
                 Key: SPARK-24229
                 URL: https://issues.apache.org/jira/browse/SPARK-24229
             Project: Spark
          Issue Type: Bug
          Components: Java API
    Affects Versions: 2.3.0
            Reporter: Ray Donnelly


According to [https://www.cvedetails.com/cve/CVE-2016-5397/]

 

.. there are critical vulnerabilities in libthrift 0.9.3 currently vendored in Apache Spark (and then, for us, into PySpark).

 

Can anyone help to assess the seriousness of this and what should be done about it?

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org