{"action":"created","issue":{"url":"https://api.github.com/repos/apache/spark/issues/22992","repository_url":"https://api.github.com/repos/apache/spark","labels_url":"https://api.github.com/repos/apache/spark/issues/22992/labels{/name}","comments_url":"https://api.github.com/repos/apache/spark/issues/22992/comments","events_url":"https://api.github.com/repos/apache/spark/issues/22992/events","html_url":"https://github.com/apache/spark/pull/22992","id":379076501,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI5NjI3NDIy","number":22992,"title":"[SPARK-24229] Update to Apache Thrift 0.10.0","user":{"login":"Fokko","id":1134248,"node_id":"MDQ6VXNlcjExMzQyNDg=","avatar_url":"https://avatars0.githubusercontent.com/u/1134248?v=4","gravatar_id":"","url":"https://api.github.com/users/Fokko","html_url":"https://github.com/Fokko","followers_url":"https://api.github.com/users/Fokko/followers","following_url":"https://api.github.com/users/Fokko/following{/other_user}","gists_url":"https://api.github.com/users/Fokko/gists{/gist_id}","starred_url":"https://api.github.com/users/Fokko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Fokko/subscriptions","organizations_url":"https://api.github.com/users/Fokko/orgs","repos_url":"https://api.github.com/users/Fokko/repos","events_url":"https://api.github.com/users/Fokko/events{/privacy}","received_events_url":"https://api.github.com/users/Fokko/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-11-09T09:01:06Z","updated_at":"2018-11-09T20:16:34Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/apache/spark/pulls/22992","html_url":"https://github.com/apache/spark/pull/22992","diff_url":"https://github.com/apache/spark/pull/22992.diff","patch_url":"https://github.com/apache/spark/pull/22992.patch"},"body":"The CVE detector is complaining about a vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2016-5397#vulnCurrentDescriptionTitle\r\n\r\n## What changes were proposed in this pull request?\r\n\r\n(Please fill in changes proposed in this fix)\r\n\r\n## How was this patch tested?\r\n\r\n(Please explain how this patch was tested. E.g. unit tests, integration tests, manual tests)\r\n(If this patch involves UI changes, please attach a screenshot; otherwise, remove this)\r\n\r\nPlease review http://spark.apache.org/contributing.html before opening a pull request.\r\n"},"comment":{"url":"https://api.github.com/repos/apache/spark/issues/comments/437482480","html_url":"https://github.com/apache/spark/pull/22992#issuecomment-437482480","issue_url":"https://api.github.com/repos/apache/spark/issues/22992","id":437482480,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNzQ4MjQ4MA==","user":{"login":"dongjoon-hyun","id":9700541,"node_id":"MDQ6VXNlcjk3MDA1NDE=","avatar_url":"https://avatars2.githubusercontent.com/u/9700541?v=4","gravatar_id":"","url":"https://api.github.com/users/dongjoon-hyun","html_url":"https://github.com/dongjoon-hyun","followers_url":"https://api.github.com/users/dongjoon-hyun/followers","following_url":"https://api.github.com/users/dongjoon-hyun/following{/other_user}","gists_url":"https://api.github.com/users/dongjoon-hyun/gists{/gist_id}","starred_url":"https://api.github.com/users/dongjoon-hyun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dongjoon-hyun/subscriptions","organizations_url":"https://api.github.com/users/dongjoon-hyun/orgs","repos_url":"https://api.github.com/users/dongjoon-hyun/repos","events_url":"https://api.github.com/users/dongjoon-hyun/events{/privacy}","received_events_url":"https://api.github.com/users/dongjoon-hyun/received_events","type":"User","site_admin":false},"created_at":"2018-11-09T20:16:34Z","updated_at":"2018-11-09T20:16:34Z","author_association":"MEMBER","body":"Thank you, @Fokko . \r\n\r\nThe description says `Go client`. If this is language dependent, does it affect Apache Spark? Could you elaborate more detail in the PR description about the relation with Apache Spark?\r\n```\r\nThe Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.\r\n```"}}
{"actor":{"display_login":"dongjoon-hyun"}}