[ 
https://issues.apache.org/jira/browse/FLUME-3452?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ralph Goers updated FLUME-3452:
-------------------------------
    Fix Version/s: 1.12.0
                       (was: notrack)

> Transient dependency of tomcat-embed-core : 8.5.46 causing CVE 2020-1938
> ------------------------------------------------------------------------
>
>                 Key: FLUME-3452
>                 URL: https://issues.apache.org/jira/browse/FLUME-3452
>             Project: Flume
>          Issue Type: Improvement
>    Affects Versions: notrack
>            Reporter: Nikita Pande
>            Priority: Major
>             Fix For: 1.12.0
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> org.apache.thrift:libthrift:0.14.1 has dependency on tomcat-embed-core : 
> 8.5.46 which is causing CVE 2020-1938



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to