Fix CVE-2017-1000487 alert for thrift 0.14.1 (sonic-net#11634)

xumia · skbarista · commit a79da188bae2 · 2022-08-17T09:32:39.000-07:00
Why I did it Fix CVE-2017-1000487 alert in thrift 0.14.1. See https://nvd.nist.gov/vuln/detail/CVE-2017-1000487 How I did it Change the version of org.codehaus.plexus:plexus-utils from 3.0.14 to 3.0.16.
diff --git a/src/thrift_0_14_1/thrift.patch/0002-cve-2017-1000487.patch b/src/thrift_0_14_1/thrift.patch/0002-cve-2017-1000487.patch
@@ -0,0 +1 @@
+../../thrift/patch/0002-cve-2017-1000487.patch
diff --git a/src/thrift_0_14_1/thrift.patch/series b/src/thrift_0_14_1/thrift.patch/series
@@ -2,3 +2,4 @@
 0002-Fix-build-rules.patch
 0003-Remove-minimist-packages.patch
 0004-Remove-underscore-packages.patch
+0002-cve-2017-1000487.patch

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+../../thrift/patch/0002-cve-2017-1000487.patch`