Update Apache Thrift

[redcatbear]

Situation

Dependabot reported the following CVE in the Apache Thrift dependency:

CVE-2020-13949
high severity
Vulnerable versions: >= 0.9.3, <= 0.13.0
Patched version: 0.14.0

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

https://github.com/exasol/hive-virtual-schema/security/dependabot/pom.xml/org.apache.thrift:libthrift/open

Acceptance Criteria

• Apache Thrift dependency updated to 0.14.0 or later

[AnastasiiaSergienko]

Here is a comment from our pom:

This dependency contains the vulnerability: https://ossindex.sonatype.org/vuln/0e739750-40a8-44bf-8cbc-776fcdd5e7f4?component-type=maven&component-name=org.apache.thrift.libthrift&utm_source=ossindex-client&utm_medium=integration&utm_content=1.1.1
But we can't exclude it because it's used in the integration test. Update is also not possible, the latest version is not compatible.

I've rechecked it again and the comment is correct, I can't update the dependency, integration test is broken after it