Skip to content

Commit ade9dbf

Browse files
bjornjorgensenyaooqinn
authored andcommitted
[SPARK-48494][BUILD][3.5] Update airlift:aircompressor to 0.27
### What changes were proposed in this pull request? upgrade airlift:aircompressor from 0.26 to 0.27 For branch 3.5 ### Why are the changes needed? [CVE-2024-36114](https://www.cve.org/CVERecord?id=CVE-2024-36114) [Decompressors can crash the JVM and leak memory content](GHSA-973x-65j7-xcf4) The fix airlift/aircompressor@d01ecb7 ### Does this PR introduce _any_ user-facing change? No. ### How was this patch tested? pass GA ### Was this patch authored or co-authored using generative AI tooling? No. Closes #47128 from bjornjorgensen/branch3.5aircompressor0.27. Authored-by: Bjørn Jørgensen <bjornjorgensen@gmail.com> Signed-off-by: Kent Yao <yao@apache.org>
1 parent 3d7a20a commit ade9dbf

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

dev/deps/spark-deps-hadoop-3-hive-2.3

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ JTransforms/3.1//JTransforms-3.1.jar
44
RoaringBitmap/0.9.45//RoaringBitmap-0.9.45.jar
55
ST4/4.0.4//ST4-4.0.4.jar
66
activation/1.1.1//activation-1.1.1.jar
7-
aircompressor/0.26//aircompressor-0.26.jar
7+
aircompressor/0.27//aircompressor-0.27.jar
88
algebra_2.12/2.0.1//algebra_2.12-2.0.1.jar
99
aliyun-java-sdk-core/4.5.10//aliyun-java-sdk-core-4.5.10.jar
1010
aliyun-java-sdk-kms/2.11.0//aliyun-java-sdk-kms-2.11.0.jar

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2586,7 +2586,7 @@
25862586
<dependency>
25872587
<groupId>io.airlift</groupId>
25882588
<artifactId>aircompressor</artifactId>
2589-
<version>0.26</version>
2589+
<version>0.27</version>
25902590
</dependency>
25912591
<dependency>
25922592
<groupId>org.apache.orc</groupId>

0 commit comments

Comments
 (0)