From 74c5c3a1c78c9a827b1d43b8f0495283a562895c Mon Sep 17 00:00:00 2001 From: Jan Werner Date: Thu, 3 Apr 2025 22:56:05 -0400 Subject: [PATCH 1/2] update parquet-avro to resolve CVE-2025-30065 --- extensions-core/parquet-extensions/pom.xml | 2 +- licenses.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/extensions-core/parquet-extensions/pom.xml b/extensions-core/parquet-extensions/pom.xml index f661bc5a2b76..a6e88c1d0e7b 100644 --- a/extensions-core/parquet-extensions/pom.xml +++ b/extensions-core/parquet-extensions/pom.xml @@ -201,7 +201,7 @@ - 1.13.0 + 1.15.1 diff --git a/licenses.yaml b/licenses.yaml index e3d894edb893..f7a49f5aaab3 100644 --- a/licenses.yaml +++ b/licenses.yaml @@ -3231,7 +3231,7 @@ name: Apache Parquet license_category: binary module: extensions/druid-parquet-extensions license_name: Apache License version 2.0 -version: 1.13.0 +version: 1.15.1 libraries: - org.apache.parquet: parquet-avro - org.apache.parquet: parquet-column From 92ce911e489cad92f7d2eada8dab7f33080f73a7 Mon Sep 17 00:00:00 2001 From: Jan Werner Date: Fri, 4 Apr 2025 00:06:41 -0400 Subject: [PATCH 2/2] add missing license for updated parquet --- licenses.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/licenses.yaml b/licenses.yaml index f7a49f5aaab3..4395b60c7817 100644 --- a/licenses.yaml +++ b/licenses.yaml @@ -3278,6 +3278,17 @@ notices: --- +name: aircompressor +license_category: binary +module: extensions/druid-parquet-extensions +license_name: Apache License version 2.0 +version: "2.0.2" +libraries: + - io.airlift: aircompressor + + +--- + name: Protocol Buffers Dynamic Schema license_category: binary module: extensions/protobuf-extensions