You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@impala.apache.org by "ji chen (Code Review)" <ge...@cloudera.org> on 2025/11/26 06:17:20 UTC
[Impala-ASF-CR] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
ji chen has uploaded this change for review. ( http://gerrit.cloudera.org:8080/23717
Change subject: IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
......................................................................
IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
This patch mainly fix the CVE-2025-46762 by bumping up paimon
version to 1.3.1.
Background:
Following PR: https://github.com/apache/incubator-paimon/pull/6363
has been merged by paimon community since paimon-1.3.0. So in
impala, need to upgrade paimon version to 1.3.0 or later to fix the
CVE as well.
Testing:
- All paimon related tests are passed.
Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
---
M bin/impala-config.sh
M fe/src/main/java/org/apache/impala/catalog/paimon/PaimonUtil.java
2 files changed, 3 insertions(+), 3 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/17/23717/1
--
To view, visit http://gerrit.cloudera.org:8080/23717
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Gerrit-Change-Number: 23717
Gerrit-PatchSet: 1
Gerrit-Owner: ji chen <ji...@163.com>
[Impala-ASF-CR] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/23717 )
Change subject: IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
......................................................................
Patch Set 1:
Build started: https://jenkins.impala.io/job/gerrit-verify-dryrun/12718/ DRY_RUN=true
--
To view, visit http://gerrit.cloudera.org:8080/23717
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Gerrit-Change-Number: 23717
Gerrit-PatchSet: 1
Gerrit-Owner: ji chen <ji...@163.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Comment-Date: Wed, 26 Nov 2025 06:17:49 +0000
Gerrit-HasComments: No
[Impala-ASF-CR] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/23717 )
Change subject: IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
......................................................................
Patch Set 1:
Build Successful
https://jenkins.impala.io/job/gerrit-code-review-checks/21036/ : Initial code review checks passed. Use gerrit-verify-dryrun-external or gerrit-verify-dryrun to run full precommit tests.
--
To view, visit http://gerrit.cloudera.org:8080/23717
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Gerrit-Change-Number: 23717
Gerrit-PatchSet: 1
Gerrit-Owner: ji chen <ji...@163.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Riza Suminto <ri...@cloudera.com>
Gerrit-Comment-Date: Wed, 26 Nov 2025 06:42:06 +0000
Gerrit-HasComments: No
[Impala-ASF-CR] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/23717 )
Change subject: IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
......................................................................
Patch Set 1: Verified+1
--
To view, visit http://gerrit.cloudera.org:8080/23717
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Gerrit-Change-Number: 23717
Gerrit-PatchSet: 1
Gerrit-Owner: ji chen <ji...@163.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Riza Suminto <ri...@cloudera.com>
Gerrit-Comment-Date: Wed, 26 Nov 2025 11:10:35 +0000
Gerrit-HasComments: No
[Impala-ASF-CR] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
Posted by "Csaba Ringhofer (Code Review)" <ge...@cloudera.org>.
Csaba Ringhofer has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/23717 )
Change subject: IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
......................................................................
IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
This patch mainly fix the CVE-2025-46762 by bumping up paimon
version to 1.3.1.
Background:
Following PR: https://github.com/apache/incubator-paimon/pull/6363
has been merged by paimon community since paimon-1.3.0. So in
impala, need to upgrade paimon version to 1.3.0 or later to fix the
CVE as well.
Testing:
- All paimon related tests are passed.
Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Reviewed-on: http://gerrit.cloudera.org:8080/23717
Reviewed-by: Riza Suminto <ri...@cloudera.com>
Reviewed-by: Csaba Ringhofer <cs...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>
---
M bin/impala-config.sh
M fe/src/main/java/org/apache/impala/catalog/paimon/PaimonUtil.java
2 files changed, 3 insertions(+), 3 deletions(-)
Approvals:
Riza Suminto: Looks good to me, but someone else must approve
Csaba Ringhofer: Looks good to me, approved
Impala Public Jenkins: Verified
--
To view, visit http://gerrit.cloudera.org:8080/23717
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Gerrit-Change-Number: 23717
Gerrit-PatchSet: 2
Gerrit-Owner: ji chen <ji...@163.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Riza Suminto <ri...@cloudera.com>
[Impala-ASF-CR] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
Posted by "Riza Suminto (Code Review)" <ge...@cloudera.org>.
Riza Suminto has posted comments on this change. ( http://gerrit.cloudera.org:8080/23717 )
Change subject: IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
......................................................................
Patch Set 1: Code-Review+1
Thank you for taking care of this.
I can +2 later if there is no other concerns.
--
To view, visit http://gerrit.cloudera.org:8080/23717
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Gerrit-Change-Number: 23717
Gerrit-PatchSet: 1
Gerrit-Owner: ji chen <ji...@163.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Riza Suminto <ri...@cloudera.com>
Gerrit-Comment-Date: Wed, 26 Nov 2025 06:20:14 +0000
Gerrit-HasComments: No
[Impala-ASF-CR] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
Posted by "Csaba Ringhofer (Code Review)" <ge...@cloudera.org>.
Csaba Ringhofer has posted comments on this change. ( http://gerrit.cloudera.org:8080/23717 )
Change subject: IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762
......................................................................
Patch Set 1: Code-Review+2
--
To view, visit http://gerrit.cloudera.org:8080/23717
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc
Gerrit-Change-Number: 23717
Gerrit-PatchSet: 1
Gerrit-Owner: ji chen <ji...@163.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Riza Suminto <ri...@cloudera.com>
Gerrit-Comment-Date: Wed, 26 Nov 2025 08:07:26 +0000
Gerrit-HasComments: No