You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@orc.apache.org by "William Hyun (Jira)" <ji...@apache.org> on 2026/01/08 10:24:00 UTC

[jira] [Closed] (ORC-2035) Upgrade protobuf-java to 3.25.5 on branch-1.9

     [ https://issues.apache.org/jira/browse/ORC-2035?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

William Hyun closed ORC-2035.
-----------------------------

> Upgrade protobuf-java to 3.25.5 on branch-1.9
> ---------------------------------------------
>
>                 Key: ORC-2035
>                 URL: https://issues.apache.org/jira/browse/ORC-2035
>             Project: ORC
>          Issue Type: Improvement
>    Affects Versions: 1.9.7
>            Reporter: Manu Zhang
>            Assignee: Manu Zhang
>            Priority: Major
>             Fix For: 1.9.8
>
>
> iceberg-spark-runtime depends on ORC 1.9.7 whose protobuf-java 3.22.3 dependency has [CVE-2024-7254|https://github.com/advisories/GHSA-735f-pc8j-v9w8].



--
This message was sent by Atlassian Jira
(v8.20.10#820010)