Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-37090

Upgrade libthrift to resolve security vulnerabilities

    XMLWordPrintableJSON

Details

    • Task
    • Status: Closed
    • Major
    • Resolution: Duplicate
    • 3.0.0, 3.1.0, 3.2.0, 3.3.0
    • None
    • SQL
    • None

    Description

      Currently, Spark uses libthrift 0.12, which has reported high severity security vulnerabilities https://snyk.io/vuln/maven:org.apache.thrift%3Alibthrift
      Upgrade to 0.14 to get rid of vulnerabilities.

      Attachments

        Issue Links

          is blocked by

          Bug - A problem which impairs or prevents the functions of the product. HIVE-21498 Upgrade Thrift to 0.13.0

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. HIVE-25098 [CVE-2020-13949] Upgrade thrift from 0.13.0 to 0.14.1

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. SPARK-36994 Upgrade Apache Thrift

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. SPARK-37626 Upgrade libthrift to 0.15.0

          • Major - Major loss of function.
          • Closed
          is related to

          Sub-task - The sub-task of the issue SPARK-47018 Upgrade built-in Hive to 2.3.10

          • Major - Major loss of function.
          • Resolved
          is superceded by

          Sub-task - The sub-task of the issue SPARK-47018 Upgrade built-in Hive to 2.3.10

          • Major - Major loss of function.
          • Resolved
          links to

          Pull request #34361 [Github] Pull Request #34361 (juliuszsompolski)

          Pull request #34362 [Github] Pull Request #34362 (wangyum)

          Pull request #35587 [Github] Pull Request #35587 (wangyum)

          Pull request #35587 [Github] Pull Request #35587 (wangyum)

          Pull request #35588 [Github] Pull Request #35588 (wangyum)

          Pull request #35646 [Github] Pull Request #35646 (wangyum)

          Pull request #35646 [Github] Pull Request #35646 (wangyum)

          Pull request #35647 [Github] Pull Request #35647 (wangyum)

          Pull request #35647 [Github] Pull Request #35647 (wangyum)

          Activity

            People

              Unassigned Unassigned
              juliuszsompolski Juliusz Sompolski
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: