Merge pull request #398 from xuwenping123/trunk-flume-3452

FLUME-3452. Upgrade libthrift version to fix CVE 2020-1938
apache · Mar 18, 2023 · a72ba04 · a72ba04
2 parents 375ecb2 + 0d191de
commit a72ba04
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/dev-docs/UpdateLicenses.md b/dev-docs/UpdateLicenses.md
@@ -533,7 +533,7 @@ ALv2. Entry in NOTICE.  Additional entry in NOTICE and LICENSE for
 PureJavaCrc32C; portions 2-Clause BSD.
 
 ```
-   libthrift-0.14.1.jar
+   libthrift-0.14.2.jar
 ```
 
 same as jar-with-dependencies

diff --git a/pom.xml b/pom.xml
@@ -123,7 +123,7 @@ limitations under the License.
     <solr-global.version>4.3.0</solr-global.version>
     <slf4j.version>1.7.32</slf4j.version>
     <system-rules.version>1.17.0</system-rules.version>
-    <thrift.version>0.14.1</thrift.version>
+    <thrift.version>0.14.2</thrift.version>
     <twitter4j.version>4.0.7</twitter4j.version>
     <twitter4j-media.version>4.0.6</twitter4j-media.version>
     <wiremock.version>1.53</wiremock.version>