[jira] [Created] (ORC-2035) Upgrade protobuf-java to 3.25.5 on branch-1.9

[Manu Zhang (Jira)]

Manu Zhang created ORC-2035:
-------------------------------

             Summary: Upgrade protobuf-java to 3.25.5 on branch-1.9
                 Key: ORC-2035
                 URL: https://issues.apache.org/jira/browse/ORC-2035
             Project: ORC
          Issue Type: Improvement
    Affects Versions: 1.9.7
            Reporter: Manu Zhang


iceberg-spark-runtime depends on ORC 1.9.7 whose protobuf-java 3.22.3 
dependency has 
[CVE-2024-7254|https://github.com/advisories/GHSA-735f-pc8j-v9w8].



--
This message was sent by Atlassian Jira
(v8.20.10#820010)