This release is a backport of the security fix for CVE-2018-1320 as documented in THRIFT-4506. The only code change is in Java, and a 0.9.3-1 package was released to Maven Central.
This is marked in GitHub as a pre-release so that it does not become the "latest" release.