Ubuntu
libthrift-java package

libthrift-java 0.9.1-2.1~build0.16.04.1 source package in Ubuntu

Changelog

libthrift-java (0.9.1-2.1~build0.16.04.1) xenial-security; urgency=medium

  * fake sync from Debian

libthrift-java (0.9.1-2.1) unstable; urgency=high

  * Non-maintainer upload.
  * Fix CVE-2018-1320:
    It was discovered that it was possible to bypass SASL negotiation
    isComplete validation in the org.apache.thrift.transport.TSaslTransport
    class. An assert used to determine if the SASL handshake had successfully
    completed could be disabled in production settings making the validation
    incomplete. (Closes: #918736)

 -- Mike Salvatore <email address hidden>  Thu, 07 Feb 2019 10:00:35 -0500

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Xenial
Original maintainer:
Laszlo Boszormenyi
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates universe devel
Xenial security universe devel

Builds

Xenial: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libthrift-java_0.9.1.orig.tar.gz 129.0 KiB 8cb6af03b29e6b3ba5bcd06a6cf7681222c1e606fbae2e3ae617e06710cd7998
libthrift-java_0.9.1-2.1~build0.16.04.1.debian.tar.xz 3.2 KiB 8bd925487ab6822c4f8b163c1e28ff0398fbfabb852be94a5969f8d9beb9dcb8
libthrift-java_0.9.1-2.1~build0.16.04.1.dsc 2.2 KiB 31ab487c64c90b61fd6712345b8f66f597264735b2b366e265a731fd2e70d77d

View changes file

Binary packages built by this source

libthrift-java: Java language support for Thrift

 Thrift is a software framework for the development of reliable and
 performant communication and data serialization. It combines a software
 stack with code generation to build services that operate seamlessly
 across a number of different development languages.
 .
 This package provides the Java language support for Thrift.