suneet-s opened a new pull request #11093: URL: https://github.com/apache/druid/pull/11093
#11028 talks about bumping the libthrift dependency. This patch simply suppresses the CVE so that the cron CI will show it as successful since there is already a tracking issue to fix this. To ensure that we do not forget about fixing the issue, the suppression has an expiration date of the end of the month. This PR has: - [x] been self-reviewed. - [x] added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader. - [ ] been tested locally -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
