Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade org.apache.calcite dependency to address CVE-2023-2976 #24706

Merged
merged 1 commit into from
Mar 20, 2025

Conversation

sumi-mathew
Copy link
Contributor

@sumi-mathew sumi-mathew commented Mar 11, 2025

Description

Upgrade the org.apache.calcite dependency from version 1.32.0 to 1.38.0 to avoiding CVE issues.

Motivation and Context

Upgrading the org.apache.calcite dependency from version 1.32.0 to 1.38.0 to reduce the risk of introducing new security flaws

Impact

Test Plan

Contributor checklist

  • Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
  • PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
  • Documented new properties (with its default value), SQL syntax, functions, or other functionality.
  • If release notes are required, they follow the release notes guidelines.
  • Adequate tests were added if applicable.
  • CI passed.

Release Notes

Please follow release notes guidelines and fill in the release notes below.


== RELEASE NOTES ==

Security Changes
* Upgrade org.apache.calcite to 1.38.0 in response to `CVE-2023-2976<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976>`_. 




@prestodb-ci prestodb-ci added the from:IBM PR from IBM label Mar 11, 2025
@sumi-mathew sumi-mathew force-pushed the upgarde-calcite branch 2 times, most recently from ca42f83 to 5832dfe Compare March 13, 2025 04:57
@sumi-mathew sumi-mathew marked this pull request as ready for review March 19, 2025 05:17
@sumi-mathew sumi-mathew requested a review from a team as a code owner March 19, 2025 05:17
@sumi-mathew sumi-mathew requested a review from presto-oss March 19, 2025 05:17
@prestodb-ci prestodb-ci requested review from a team, pramodsatya and NivinCS and removed request for a team March 19, 2025 05:17
@NivinCS
Copy link
Contributor

NivinCS commented Mar 19, 2025

Please check the dependency tree with the latest changes and confirm that the same version is updated throughout the entire project.

@sumi-mathew sumi-mathew force-pushed the upgarde-calcite branch 2 times, most recently from 1271cea to 60855f2 Compare March 19, 2025 06:48
Copy link
Contributor

@pratyakshsharma pratyakshsharma left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the fix.

@yingsu00 yingsu00 merged commit 07c31ab into prestodb:master Mar 20, 2025
92 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
from:IBM PR from IBM
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants