Fix CVE-2017-1000487 alert for thrift 0.14.1 (#11634)

Why I did it Fix CVE-2017-1000487 alert in thrift 0.14.1. See https://nvd.nist.gov/vuln/detail/CVE-2017-1000487 How I did it Change the version of org.codehaus.plexus:plexus-utils from 3.0.14 to 3.0.16.
sonic-net · Aug 8, 2022 · 89772b6 · 89772b6
1 parent 83db796
commit 89772b6
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/src/thrift_0_14_1/thrift.patch/0002-cve-2017-1000487.patch b/src/thrift_0_14_1/thrift.patch/0002-cve-2017-1000487.patch
@@ -0,0 +1 @@
+../../thrift/patch/0002-cve-2017-1000487.patch
diff --git a/src/thrift_0_14_1/thrift.patch/series b/src/thrift_0_14_1/thrift.patch/series
@@ -2,3 +2,4 @@
 0002-Fix-build-rules.patch
 0003-Remove-minimist-packages.patch
 0004-Remove-underscore-packages.patch
+0002-cve-2017-1000487.patch