This is an automated email from the ASF dual-hosted git repository.
pvary pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg.git
The following commit(s) were added to refs/heads/main by this push:
new 2c0dd406fc Build: Ignore CVE-2026-68494 shaded into parquet-jackson
(#18358)
2c0dd406fc is described below
commit 2c0dd406fc1269810074006e49c5ded061feedf1
Author: Manu Zhang <[email protected]>
AuthorDate: Mon Oct 5 19:22:12 2026 +0800
Build: Ignore CVE-2026-68494 shaded into parquet-jackson (#18358)
---
.github/trivyignore/kafka-connect-runtime.trivyignore | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/trivyignore/kafka-connect-runtime.trivyignore
b/.github/trivyignore/kafka-connect-runtime.trivyignore
index 97a40acf29..28875f76ab 100644
--- a/.github/trivyignore/kafka-connect-runtime.trivyignore
+++ b/.github/trivyignore/kafka-connect-runtime.trivyignore
@@ -30,7 +30,7 @@ CVE-2026-54512
CVE-2026-54513
# jackson-core CVE shaded into parquet-jackson, only fixed in jackson
# >= 2.18.8 / 2.21.4 / 2.22.1.
-GHSA-r7wm-3cxj-wff9
+CVE-2026-68494
# jackson-databind CVE shaded into parquet-jackson 1.17.1, only fixed in
# jackson >= 2.18.10 / 2.21.6 / 2.22.2. Resolved once Apache Parquet is
# bumped to 1.18.1 (apache/iceberg#17321).
