Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-24148

Upgrade Thrift to 0.13.0: 0.12.0 has outstanding CVEs.

    XMLWordPrintableJSON

Details

    • Reviewed

    Description

      In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.

      To be on the safe side, we could update to 0.13.0.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. HBASE-24123 [Flakey Tests] Thrift tests (TestThrift?ServerCmdLine)

          • Major - Major loss of function.
          • Open
          relates to

          Task - A task that needs to be done. HBASE-21791 Upgrade thrift dependency to 0.12.0

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved
          links to

          Web Link GitHub Pull Request #1462

          Web Link GitHub Pull Request #1519

          Web Link GitHub Pull Request #1532

          Web Link GitHub Pull Request #1533

          Activity

            People

              tamaas Tamas Penzes
              tamaas Tamas Penzes
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: