Skip to content

DRILL-8520: Update Parquet due to CVE #2984

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

cgivre
Copy link
Contributor

@cgivre cgivre commented Apr 10, 2025

DRILL-8520: Update Parquet due to CVE

Description

Updated parquet libraries to latest version due to CVE.

Documentation

No user facing changes.

Testing

(Please describe how this PR has been tested.)

@cgivre cgivre self-assigned this Apr 10, 2025
@cgivre cgivre added security backport-to-stable This bug fix is applicable to the latest stable release and should be considered for inclusion there labels Apr 10, 2025
@cgivre cgivre marked this pull request as draft April 10, 2025 20:05
Copy link
Member

@rymarm rymarm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@cgivre Hi Charles! Do you plan to make any more changes in this PR? It has draft status.

I’ve reviewed everything, and it all looks good to me — except for the file exec/java-exec/src/main/java/org/apache/parquet/hadoop/ParquetColumnChunkPageWriteStore.java.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@cgivre Why did you do the changes? Correct me if I'm missing something, but they don’t seem to add value or improve code clarity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport-to-stable This bug fix is applicable to the latest stable release and should be considered for inclusion there code-cleanup dependencies security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants