Skip to content

[fix][sec] Upgrade aircompressor to 2.0.3 to resolve CVE-2025-67721 - #25256

Merged
merlimat merged 1 commit into
apache:masterfrom
lhotari:lh-upgrade-aircompressor-2.0.3
Feb 25, 2026
Merged

[fix][sec] Upgrade aircompressor to 2.0.3 to resolve CVE-2025-67721#25256
merlimat merged 1 commit into
apache:masterfrom
lhotari:lh-upgrade-aircompressor-2.0.3

Conversation

@lhotari

@lhotari lhotari commented Feb 24, 2026

Copy link
Copy Markdown
Member

Fixes #25139

Motivation

io.airlift:aircompressor:0.27 contains CVE-2025-67721

Modifications

Upgrade io.airlift:aircompressor to 2.0.3 to get the required fixes.

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

@lhotari lhotari added this to the 4.2.0 milestone Feb 24, 2026
@lhotari
lhotari requested a review from merlimat February 24, 2026 18:04
@lhotari lhotari self-assigned this Feb 24, 2026
@github-actions github-actions Bot added the doc-not-needed Your PR changes do not impact docs label Feb 24, 2026
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.60%. Comparing base (82fcb18) to head (c029034).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@              Coverage Diff              @@
##             master   #25256       +/-   ##
=============================================
+ Coverage     37.64%   72.60%   +34.96%     
- Complexity    13387    34382    +20995     
=============================================
  Files          1902     1959       +57     
  Lines        151239   155418     +4179     
  Branches      17240    17731      +491     
=============================================
+ Hits          56939   112849    +55910     
+ Misses        86586    33547    -53039     
- Partials       7714     9022     +1308     
Flag Coverage Δ
inttests 25.60% <ø> (-0.28%) ⬇️
systests 22.43% <ø> (-0.04%) ⬇️
unittests 73.57% <ø> (+39.18%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1419 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@merlimat
merlimat merged commit ee477cc into apache:master Feb 25, 2026
55 of 57 checks passed
Riyasoni0 pushed a commit to datastax/pulsar that referenced this pull request Mar 5, 2026
hshankar31 pushed a commit to datastax/pulsar that referenced this pull request Mar 9, 2026
Riyasoni0 pushed a commit to datastax/pulsar that referenced this pull request Mar 9, 2026
hshankar31 pushed a commit to datastax/pulsar that referenced this pull request Mar 9, 2026
manas-ctds pushed a commit to datastax/pulsar that referenced this pull request Mar 10, 2026
nodece pushed a commit to ascentstream/pulsar that referenced this pull request May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[sec] io.airlift:aircompressor contains CVE-2025-67721

3 participants