-
Notifications
You must be signed in to change notification settings - Fork 5.5k
Open
Labels
Description
This issue aims to upgrade hudi-presto-bundle to 1.1.0, which includes several security-related fixes, notably addressing CVE-2025-46762, cleanup of shaded META-INF metadata that previously led to false-positive CVE detections in security scans, latest improvements and enhancements.
Background
While upgrading to version 1.0.2 security scans flagged these false positives, the Hudi community has been resolving them in 1.1.0 which is WIP. Upgrading will ensure that Presto aligns with the latest secure and stable release of Hudi.
Update from Hudi Community
- CVEs resolved - False-positive CVEs detected in
hudi-presto-bundleMETA-INF during upgrade to Hudi 1.0.2 apache/hudi#14084 - Hudi 1.1.0 release is currently in progress, with Release Candidate 2 (RC2) under community testing and the final release expected soon.