Laurent Goujon created THRIFT-5075: -------------------------------------- Summary: Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version Key: THRIFT-5075 URL: https://issues.apache.org/jira/browse/THRIFT-5075 Project: Thrift Issue Type: Bug Reporter: Laurent Goujon
Similar to THRIFT-4506, would it be possible to backport fixes for CVE-2019-0205 to 0.9.x branch. There are still several projects still relying on 0.9.3-1, and the vulnerability seems to impact them as well. I believe the fix for Java was part of THRIFT-4024 -- This message was sent by Atlassian Jira (v8.3.4#803005)