You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Apache Spark (Jira)" <ji...@apache.org> on 2021/10/14 02:50:00 UTC

[jira] [Commented] (SPARK-36994) Upgrade Apache Thrift

    [ https://issues.apache.org/jira/browse/SPARK-36994?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17428579#comment-17428579 ] 

Apache Spark commented on SPARK-36994:
--------------------------------------

User 'HyukjinKwon' has created a pull request for this issue:
https://github.com/apache/spark/pull/34280

> Upgrade Apache Thrift
> ---------------------
>
>                 Key: SPARK-36994
>                 URL: https://issues.apache.org/jira/browse/SPARK-36994
>             Project: Spark
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 3.0.1
>            Reporter: kaja girish
>            Priority: Major
>
> *Image:*
>  * spark:3.0.1
> *Components Affected:* 
>  * Apache Thrift
> *Recommendation:*
>  * upgrade Apache Thrift 
> *CVE:*
>  
> |Component Name|Component Version Name|Vulnerability|Fixed version|
> |Apache Thrift|0.11.0-4.|CVE-2019-0205|0.13.0|
> |Apache Thrift|0.11.0-4.|CVE-2019-0210|0.13.0|
> |Apache Thrift|0.11.0-4.|CVE-2020-13949|0.14.1|



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org