This is an automated email from the ASF dual-hosted git repository.

kgyrtkirk pushed a commit to branch 33.0.0
in repository https://gitbox.apache.org/repos/asf/druid.git

commit d1c8735e25e24919263550cde7a84dc37a4f7ac3
Author: Jan Werner <[email protected]>
AuthorDate: Fri Apr 4 10:44:58 2025 -0400

    update parquet-avro to resolve CVE-2025-30065 (#17874)
    
    * update parquet-avro to resolve CVE-2025-30065
    
    * add missing license for updated parquet
    
    (cherry picked from commit 5fcd2cf56aec992d397e010e67c59cf638d0e7d0)
---
 extensions-core/parquet-extensions/pom.xml |  2 +-
 licenses.yaml                              | 13 ++++++++++++-
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/extensions-core/parquet-extensions/pom.xml 
b/extensions-core/parquet-extensions/pom.xml
index f661bc5a2b7..a6e88c1d0e7 100644
--- a/extensions-core/parquet-extensions/pom.xml
+++ b/extensions-core/parquet-extensions/pom.xml
@@ -201,7 +201,7 @@
         </dependency>
       </dependencies>
       <properties>
-        <parquet.version>1.13.0</parquet.version>
+        <parquet.version>1.15.1</parquet.version>
       </properties>
     </profile>
   </profiles>
diff --git a/licenses.yaml b/licenses.yaml
index 340768191c5..10d3c255226 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -3231,7 +3231,7 @@ name: Apache Parquet
 license_category: binary
 module: extensions/druid-parquet-extensions
 license_name: Apache License version 2.0
-version: 1.13.0
+version: 1.15.1
 libraries:
   - org.apache.parquet: parquet-avro
   - org.apache.parquet: parquet-column
@@ -3278,6 +3278,17 @@ notices:
 
 ---
 
+name: aircompressor
+license_category: binary
+module: extensions/druid-parquet-extensions
+license_name: Apache License version 2.0
+version: "2.0.2"
+libraries:
+  - io.airlift: aircompressor
+
+
+---
+
 name: Protocol Buffers Dynamic Schema
 license_category: binary
 module: extensions/protobuf-extensions


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to