You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@orc.apache.org by "kmai1 (via GitHub)" <gi...@apache.org> on 2026/02/23 21:29:22 UTC
[I] aircompressor CVE-2025-67721 vuln [orc]
kmai1 opened a new issue, #2553:
URL: https://github.com/apache/orc/issues/2553
orc pkg uses aircompressor:2.0.2 which contains the CVE-2025-67721 vuln
aircompressor-v3:3.4 contains the fix for this vuln, but due to a different artifact name, users cannot pin this version
please help resolve this
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] aircompressor CVE-2025-67721 vuln [orc]
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on issue #2553:
URL: https://github.com/apache/orc/issues/2553#issuecomment-3947479796
This is already resolved via the following. Apache ORC 2.3.0 will not use the vulnerable `AirCompressor` LZ4 and Snappy by default.
- #2511
- #2522
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] aircompressor CVE-2025-67721 vuln [orc]
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun closed issue #2553: aircompressor CVE-2025-67721 vuln
URL: https://github.com/apache/orc/issues/2553
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] aircompressor CVE-2025-67721 vuln [orc]
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on issue #2553:
URL: https://github.com/apache/orc/issues/2553#issuecomment-3947484080
For the record, Apache ORC 2.3.0 milestone is here and Apache ORC community is currently preparing the release.
- https://github.com/apache/orc/milestone/50
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org