Uploaded image for project: 'MariaDB ColumnStore'
  1. MariaDB ColumnStore
  2. MCOL-6513

Update bundled Apache Thrift to 0.24.0 (SBOM CVE fixes)

    XMLWordPrintable

Details

    • Task
    • Status: Closed (View Workflow)
    • Critical
    • Resolution: Fixed
    • None
    • 23.02.24, 25.10.7
    • Build
    • None
    • 2026-8

    Description

      Umbrella for upgrading the bundled Apache Thrift library in ColumnStore to 0.24.0 (cmake/thrift.cmake). Resolves the 13 SBOM Thrift CVEs linked below; all are fixed in Thrift 0.24.0. Note: stable-23.10 currently has 0.23.0 (MCOL-6477), but released ES builds still ship 0.22.0 because the columnstore submodule pointer in the server repo predates that bump.

      Attachments

        Activity

          People

            vasily.kozhukhovskiy Vasily Kozhukhovskiy
            vasily.kozhukhovskiy Vasily Kozhukhovskiy
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - 0.5d
                0.5d
                Remaining:
                0d
                Logged:
                Time Not Required
                Not Specified

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.