[ 
https://issues.apache.org/jira/browse/IMPALA-14513?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18061178#comment-18061178
 ] 

Joe McDonnell commented on IMPALA-14513:
----------------------------------------

Toolchain change:
{noformat}
commit d33b06dc9d5cacc4237a39391f70648566f27ccd
Author: Joe McDonnell <[email protected]>
Date:   Sat Oct 25 09:43:14 2025 -0700    IMPALA-14513: Upgrade curl to 8.17.0
    
    This is a routine upgrade to resolve a couple low severity
    vulnerabilities. Curl 8.18.0 requires OpenSSL >= 3, so this
    is as new as we can go.
    
    Testing:
     - Built Impala against this and ran tests (one test will need
       a change to the expected error message)
    
    Change-Id: I0dc1024e6fb8fc8fbc5973e2720e5fb260416ecb
    Reviewed-on: http://gerrit.cloudera.org:8080/23684
    Reviewed-by: Michael Smith <[email protected]>
    Tested-by: Joe McDonnell <[email protected]>
{noformat}

> Update curl to 8.16.0 or higher
> -------------------------------
>
>                 Key: IMPALA-14513
>                 URL: https://issues.apache.org/jira/browse/IMPALA-14513
>             Project: IMPALA
>          Issue Type: Task
>          Components: Infrastructure
>    Affects Versions: Impala 5.0.0
>            Reporter: Joe McDonnell
>            Assignee: Joe McDonnell
>            Priority: Major
>             Fix For: Impala 5.0.0
>
>
> Curl release 8.16.0 with fixes for a couple low severity CVEs. We should 
> upgrade to pick up those fixes.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to