[jira] [Updated] (HBASE-24148) Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs.
[ https://issues.apache.org/jira/browse/HBASE-24148?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Kyle Purtell updated HBASE-24148: Fix Version/s: 1.4.14 1.3.7 Hadoop Flags: Reviewed Resolution: Fixed Status: Resolved (was: Patch Available) > Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs. > -- > > Key: HBASE-24148 > URL: https://issues.apache.org/jira/browse/HBASE-24148 > Project: HBase > Issue Type: Improvement > Components: Thrift >Affects Versions: 3.0.0 >Reporter: Tamas Penzes >Assignee: Tamas Penzes >Priority: Major > Fix For: 3.0.0, 2.3.0, 1.3.7, 1.7.0, 1.4.14, 2.2.5 > > > In Apache Thrift all versions up to and including 0.12.0, a server or client > may run into an endless loop when feed with specific input data. Because the > issue had already been partially fixed in version 0.11.0, depending on the > installed version it affects only certain language bindings. > To be on the safe side, we could update to 0.13.0. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (HBASE-24148) Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs.
[ https://issues.apache.org/jira/browse/HBASE-24148?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Stack updated HBASE-24148: -- Fix Version/s: (was: 2.4.0) > Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs. > -- > > Key: HBASE-24148 > URL: https://issues.apache.org/jira/browse/HBASE-24148 > Project: HBase > Issue Type: Improvement > Components: Thrift >Affects Versions: 3.0.0 >Reporter: Tamas Penzes >Assignee: Tamas Penzes >Priority: Major > Fix For: 3.0.0, 2.3.0, 1.7.0, 2.2.5 > > > In Apache Thrift all versions up to and including 0.12.0, a server or client > may run into an endless loop when feed with specific input data. Because the > issue had already been partially fixed in version 0.11.0, depending on the > installed version it affects only certain language bindings. > To be on the safe side, we could update to 0.13.0. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (HBASE-24148) Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs.
[ https://issues.apache.org/jira/browse/HBASE-24148?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Kyle Purtell updated HBASE-24148: Fix Version/s: 2.2.5 2.4.0 1.7.0 > Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs. > -- > > Key: HBASE-24148 > URL: https://issues.apache.org/jira/browse/HBASE-24148 > Project: HBase > Issue Type: Improvement > Components: Thrift >Affects Versions: 3.0.0 >Reporter: Tamas Penzes >Assignee: Tamas Penzes >Priority: Major > Fix For: 3.0.0, 2.3.0, 1.7.0, 2.4.0, 2.2.5 > > > In Apache Thrift all versions up to and including 0.12.0, a server or client > may run into an endless loop when feed with specific input data. Because the > issue had already been partially fixed in version 0.11.0, depending on the > installed version it affects only certain language bindings. > To be on the safe side, we could update to 0.13.0. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (HBASE-24148) Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs.
[ https://issues.apache.org/jira/browse/HBASE-24148?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Stack updated HBASE-24148: -- Summary: Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs. (was: Upgrade Thrift to 0.13.0) > Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs. > -- > > Key: HBASE-24148 > URL: https://issues.apache.org/jira/browse/HBASE-24148 > Project: HBase > Issue Type: Improvement > Components: Thrift >Affects Versions: 3.0.0 >Reporter: Tamas Penzes >Assignee: Tamas Penzes >Priority: Major > Fix For: 3.0.0, 2.3.0 > > > In Apache Thrift all versions up to and including 0.12.0, a server or client > may run into an endless loop when feed with specific input data. Because the > issue had already been partially fixed in version 0.11.0, depending on the > installed version it affects only certain language bindings. > To be on the safe side, we could update to 0.13.0. -- This message was sent by Atlassian Jira (v8.3.4#803005)