[
https://issues.apache.org/jira/browse/HBASE-30182?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18084137#comment-18084137
]
Duo Zhang commented on HBASE-30182:
-----------------------------------
Ah, libthrift 0.23.0 has moved up the jakarta servlet api, where on branch-2 we
still need javax servlet api to support java 8...
> Bump libthrift version in hbase
> -------------------------------
>
> Key: HBASE-30182
> URL: https://issues.apache.org/jira/browse/HBASE-30182
> Project: HBase
> Issue Type: Task
> Components: security, Thrift
> Reporter: Duo Zhang
> Assignee: Duo Zhang
> Priority: Major
>
> There is a CVE for thrift.
> https://nvd.nist.gov/vuln/detail/CVE-2026-43869
> Let's upgrade libthrift version.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
