You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@parquet.apache.org by "neilmadden-hazelcast (via GitHub)" <gi...@apache.org> on 2026/06/30 13:47:56 UTC
[I] Any plan to update aircompressor to address CVE-2025-67721? [parquet-format]
neilmadden-hazelcast opened a new issue, #593:
URL: https://github.com/apache/parquet-format/issues/593
### Describe the usage question you have. Please include as many useful details as possible.
Our vulnerability scanners are flagging [CVE-2025-67721](https://github.com/airlift/aircompressor/security/advisories/GHSA-vx9q-rhv9-3jvg) in aircompressor, as a transitive dependency of parquet-avro. NVD are flagging this as High severity. It appears to be fixed in v2.0.3, whereas parquet 1.17.1 currently includes 2.0.2. Are there any plans for a 1.17.2 release to fix this? (We can override the dependency ourselves, but would rather not do that for long if possible). Thanks 🙏
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For additional commands, e-mail: issues-help@parquet.apache.org
Re: [I] Any plan to update aircompressor to address CVE-2025-67721? [parquet-format]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb closed issue #593: Any plan to update aircompressor to address CVE-2025-67721?
URL: https://github.com/apache/parquet-format/issues/593
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For additional commands, e-mail: issues-help@parquet.apache.org
Re: [I] Any plan to update aircompressor to address CVE-2025-67721? [parquet-format]
Posted by "wgtmac (via GitHub)" <gi...@apache.org>.
wgtmac commented on issue #593:
URL: https://github.com/apache/parquet-format/issues/593#issuecomment-4949958301
I think this is the wrong place to report issue of parquet-java. We don't have a plan to release 1.17.2. Is it possible to use 1.18.0 which will be released next?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For additional commands, e-mail: issues-help@parquet.apache.org
Re: [I] Any plan to update aircompressor to address CVE-2025-67721? [parquet-format]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb commented on issue #593:
URL: https://github.com/apache/parquet-format/issues/593#issuecomment-5285235470
Closing as I think this is the wrong repo
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For additional commands, e-mail: issues-help@parquet.apache.org
Re: [I] Any plan to update aircompressor to address CVE-2025-67721? [parquet-format]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb commented on issue #593:
URL: https://github.com/apache/parquet-format/issues/593#issuecomment-5285227321
You are probably looking for
- https://github.com/apache/parquet-java
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@parquet.apache.org
For additional commands, e-mail: issues-help@parquet.apache.org