tocsin

Debian/libthrift-java: high 7.5

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine i

Action: Upgrade libthrift-java to 0.9.1-2.1 or later.

Affected

introducedfixedlast affected
00.9.1-2.1-

Fixed versions

0.9.1-2.1

Sources

published · modified · JSON