[
https://issues.apache.org/jira/browse/FLUME-3452?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17702160#comment-17702160
]
ASF subversion and git services commented on FLUME-3452:
--------------------------------------------------------
Commit a72ba04ca8e630c9c4a4468af763dfd7a2b7f5eb in flume's branch
refs/heads/trunk from Ralph Goers
[ https://gitbox.apache.org/repos/asf?p=flume.git;h=a72ba04ca ]
Merge pull request #398 from xuwenping123/trunk-flume-3452
FLUME-3452. Upgrade libthrift version to fix CVE 2020-1938
> Transient dependency of tomcat-embed-core : 8.5.46 causing CVE 2020-1938
> ------------------------------------------------------------------------
>
> Key: FLUME-3452
> URL: https://issues.apache.org/jira/browse/FLUME-3452
> Project: Flume
> Issue Type: Improvement
> Affects Versions: notrack
> Reporter: Nikita Pande
> Priority: Major
> Fix For: notrack
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> org.apache.thrift:libthrift:0.14.1 has dependency on tomcat-embed-core :
> 8.5.46 which is causing CVE 2020-1938
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
