[
https://issues.apache.org/jira/browse/HADOOP-19791?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18053906#comment-18053906
]
Shubham Kalloli commented on HADOOP-19791:
------------------------------------------
Hi Team, I am interested in working on this change and can see that the
Protobuf version would need to be upgraded to 3.25.8 for this change to work.
There are two approaches
# Proceed with localised upgrade for Protobuf to 3.25.8
# Upgrade the Protobuf to 3.25.8 for the entire project
I am in favour of taking the second approach here. Are there any concerns for
implementing the upgrade for Protobuf for the entire project?
Should that be completed in another ticket?
Thanks for your feedback and guidance
> Upgrade Google Cloud Storage to remediate CVEs
> ----------------------------------------------
>
> Key: HADOOP-19791
> URL: https://issues.apache.org/jira/browse/HADOOP-19791
> Project: Hadoop Common
> Issue Type: Task
> Components: cloud-storage
> Affects Versions: 3.4.2
> Reporter: Shubham Kalloli
> Priority: Major
> Fix For: 3.5.0
>
> Attachments: report.html
>
>
> Upgrading Google Cloud Storage from 2.52.0 to 2.62.0 to remediate
> CVE-2025-55163
> Updating Guava and Protobuf to prevent conflicts
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
