[
https://issues.apache.org/jira/browse/ORC-2035?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
William Hyun closed ORC-2035.
-----------------------------
> Upgrade protobuf-java to 3.25.5 on branch-1.9
> ---------------------------------------------
>
> Key: ORC-2035
> URL: https://issues.apache.org/jira/browse/ORC-2035
> Project: ORC
> Issue Type: Improvement
> Affects Versions: 1.9.7
> Reporter: Manu Zhang
> Assignee: Manu Zhang
> Priority: Major
> Fix For: 1.9.8
>
>
> iceberg-spark-runtime depends on ORC 1.9.7 whose protobuf-java 3.22.3
> dependency has
> [CVE-2024-7254|https://github.com/advisories/GHSA-735f-pc8j-v9w8].
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
