You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@orc.apache.org by "Manu Zhang (Jira)" <ji...@apache.org> on 2025/10/23 02:23:00 UTC

[jira] [Created] (ORC-2035) Upgrade protobuf-java to 3.25.5 on branch-1.9

Manu Zhang created ORC-2035:
-------------------------------

             Summary: Upgrade protobuf-java to 3.25.5 on branch-1.9
                 Key: ORC-2035
                 URL: https://issues.apache.org/jira/browse/ORC-2035
             Project: ORC
          Issue Type: Improvement
    Affects Versions: 1.9.7
            Reporter: Manu Zhang


iceberg-spark-runtime depends on ORC 1.9.7 whose protobuf-java 3.22.3 dependency has [CVE-2024-7254|https://github.com/advisories/GHSA-735f-pc8j-v9w8].



--
This message was sent by Atlassian Jira
(v8.20.10#820010)