libthrift-java 0.9.1-2.1~build0.16.04.1 source package in Ubuntu
Changelog
libthrift-java (0.9.1-2.1~build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian libthrift-java (0.9.1-2.1) unstable; urgency=high * Non-maintainer upload. * Fix CVE-2018-1320: It was discovered that it was possible to bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete. (Closes: #918736) -- Mike Salvatore <email address hidden> Thu, 07 Feb 2019 10:00:35 -0500
Upload details
- Uploaded by:
- Mike Salvatore
- Uploaded to:
- Xenial
- Original maintainer:
- Laszlo Boszormenyi
- Architectures:
- all
- Section:
- java
- Urgency:
- Very Urgent
See full publishing history Publishing
Series | Published | Component | Section | |
---|---|---|---|---|
Xenial | updates | universe | devel | |
Xenial | security | universe | devel |
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
libthrift-java_0.9.1.orig.tar.gz | 129.0 KiB | 8cb6af03b29e6b3ba5bcd06a6cf7681222c1e606fbae2e3ae617e06710cd7998 |
libthrift-java_0.9.1-2.1~build0.16.04.1.debian.tar.xz | 3.2 KiB | 8bd925487ab6822c4f8b163c1e28ff0398fbfabb852be94a5969f8d9beb9dcb8 |
libthrift-java_0.9.1-2.1~build0.16.04.1.dsc | 2.2 KiB | 31ab487c64c90b61fd6712345b8f66f597264735b2b366e265a731fd2e70d77d |
Available diffs
Binary packages built by this source
- libthrift-java: Java language support for Thrift
Thrift is a software framework for the development of reliable and
performant communication and data serialization. It combines a software
stack with code generation to build services that operate seamlessly
across a number of different development languages.
.
This package provides the Java language support for Thrift.