matthew/sonic-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix CVE-2017-1000487 alert for thrift 0.14.1 (#11634)

Browse Source 
Why I did it
Fix CVE-2017-1000487 alert in thrift 0.14.1.
See https://nvd.nist.gov/vuln/detail/CVE-2017-1000487

How I did it
Change the version of org.codehaus.plexus:plexus-utils from 3.0.14 to 3.0.16.
This commit is contained in:
xumia 2022-08-08 12:48:48 +08:00 committed by GitHub
parent 83db796b0a
commit 89772b6bdc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/thrift_0_14_1/thrift.patch/0002-cve-2017-1000487.patch Symbolic link
View File

@ -0,0 +1 @@
../../thrift/patch/0002-cve-2017-1000487.patch

1
src/thrift_0_14_1/thrift.patch/series
View File

@ -2,3 +2,4 @@
0002-Fix-build-rules.patch
0003-Remove-minimist-packages.patch
0004-Remove-underscore-packages.patch
0002-cve-2017-1000487.patch