Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-25098

[CVE-2020-13949] Upgrade thrift from 0.13.0 to 0.14.1

    XMLWordPrintableJSON

Details

    Description

      Upgrading thrift from 0.13.0 to 0.14.0 due to

      https://nvd.nist.gov/vuln/detail/CVE-2020-13949

      Attachments

        Issue Links

          blocks

          Task - A task that needs to be done. SPARK-37090 Upgrade libthrift to resolve security vulnerabilities

          • Major - Major loss of function.
          • Closed
          breaks

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-4766 Support HS2 client login timeout when the thrift thread max# is reached

          • Major - Major loss of function.
          • Resolved
          causes

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-26631 Remove unused Thrift config parameters login.timeout and exponential.backoff.slot.length

          • Major - Major loss of function.
          • Closed
          Is contained by

          Sub-task - The sub-task of the issue HIVE-26749 CVE Upgrades for 3.2.0 release

          • Blocker - Blocks development and/or testing work, production could not run
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-26751 Bug Fixes and Improvements for 3.2.0 release

          • Blocker - Blocks development and/or testing work, production could not run
          • Open
          is related to

          Sub-task - The sub-task of the issue SPARK-47018 Upgrade built-in Hive to 2.3.10

          • Major - Major loss of function.
          • Resolved
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-25996 Backport HIVE-25098

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #2330

          Web Link https://github.com/apache/hive/pull/2330

          Activity

            People

              ashish-kumar-sharma Ashish Sharma
              ashish-kumar-sharma Ashish Sharma
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 10m
                  10m