You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@arrow.apache.org by "swarajban (via GitHub)" <gi...@apache.org> on 2025/12/03 23:23:32 UTC
[I] Fix for CVE-2025-22871 [arrow-adbc]
swarajban opened a new issue, #3768:
URL: https://github.com/apache/arrow-adbc/issues/3768
### What would you like help with?
https://nvd.nist.gov/vuln/detail/CVE-2025-22871
Vulnerability requires building with Go 1.24.2+ to fix
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@arrow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Go] Bump Go version to 1.24.2+ [arrow-adbc]
Posted by "swarajban (via GitHub)" <gi...@apache.org>.
swarajban commented on issue #3768:
URL: https://github.com/apache/arrow-adbc/issues/3768#issuecomment-3609403762
Ah this doesn't affect our product at all, however, I suspect that others will report this vuln to you bc of similar vuln finding tools
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Fix for CVE-2025-22871 [arrow-adbc]
Posted by "lidavidm (via GitHub)" <gi...@apache.org>.
lidavidm commented on issue #3768:
URL: https://github.com/apache/arrow-adbc/issues/3768#issuecomment-3609295645
Additionally: if you believe you have found a vulnerability, please follow the [vulnerability reporting process](https://apache.org/security/#reporting-a-vulnerability) (albeit too late now)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Fix for CVE-2025-22871 [arrow-adbc]
Posted by "swarajban (via GitHub)" <gi...@apache.org>.
swarajban commented on issue #3768:
URL: https://github.com/apache/arrow-adbc/issues/3768#issuecomment-3609345832
We use a vulnerability scanning tool that found this vuln in libadbc_driver_snowflake.so.
<img width="648" height="488" alt="Image" src="https://github.com/user-attachments/assets/47357552-a32c-4b2e-a815-131574d6668b" />
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Go] Bump Go version to 1.24.2+ [arrow-adbc]
Posted by "lidavidm (via GitHub)" <gi...@apache.org>.
lidavidm commented on issue #3768:
URL: https://github.com/apache/arrow-adbc/issues/3768#issuecomment-3609427183
Ah ok - thanks, I've put up a PR to bump the version
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Fix for CVE-2025-22871 [arrow-adbc]
Posted by "lidavidm (via GitHub)" <gi...@apache.org>.
lidavidm commented on issue #3768:
URL: https://github.com/apache/arrow-adbc/issues/3768#issuecomment-3609294325
Can you explain how this affects this project?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Go] Bump Go version to 1.24.2+ [arrow-adbc]
Posted by "lidavidm (via GitHub)" <gi...@apache.org>.
lidavidm closed issue #3768: [Go] Bump Go version to 1.24.2+
URL: https://github.com/apache/arrow-adbc/issues/3768
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Fix for CVE-2025-22871 [arrow-adbc]
Posted by "lidavidm (via GitHub)" <gi...@apache.org>.
lidavidm commented on issue #3768:
URL: https://github.com/apache/arrow-adbc/issues/3768#issuecomment-3609355643
An automated tool is not definitive. Can you explain how the linked CVE affects the driver?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org