From 685745f785e066771bb55045e3ed47967635edfa Mon Sep 17 00:00:00 2001 From: jichen0919 Date: Wed, 26 Nov 2025 14:09:34 +0800 Subject: [PATCH] IMPALA-14579: Bump up paimon version to 1.3.1 for CVE-2025-46762 This patch mainly fix the CVE-2025-46762 by bumping up paimon version to 1.3.1. Background: Following PR: https://github.com/apache/incubator-paimon/pull/6363 has been merged by paimon community since paimon-1.3.0. So in impala, need to upgrade paimon version to 1.3.0 or later to fix the CVE as well. Testing: - All paimon related tests are passed. Change-Id: Ie8052f71a5e2a4e39b0ac39b6d349e55f10092bc Reviewed-on: http://gerrit.cloudera.org:8080/23717 Reviewed-by: Riza Suminto Reviewed-by: Csaba Ringhofer Tested-by: Impala Public Jenkins --- bin/impala-config.sh | 2 +- .../java/org/apache/impala/catalog/paimon/PaimonUtil.java | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/bin/impala-config.sh b/bin/impala-config.sh index 5b05b0104..a5b758d2f 100755 --- a/bin/impala-config.sh +++ b/bin/impala-config.sh @@ -296,7 +296,7 @@ export IMPALA_DBCP2_VERSION=2.12.0 export IMPALA_DROPWIZARD_METRICS_VERSION=4.2.26 export IMPALA_AIRCOMPRESSOR_VERSION=0.27 export IMPALA_DATASKETCHES_VERSION=6.0.0 -export IMPALA_PAIMON_VERSION=1.1.1 +export IMPALA_PAIMON_VERSION=1.3.1 # When Impala is building docker images on Redhat-based distributions, # it is useful to be able to customize the base image. Some users will # want to use open source / free distributions like Centos/Rocky/Alma/etc. diff --git a/fe/src/main/java/org/apache/impala/catalog/paimon/PaimonUtil.java b/fe/src/main/java/org/apache/impala/catalog/paimon/PaimonUtil.java index 6fa195de6..f73870864 100644 --- a/fe/src/main/java/org/apache/impala/catalog/paimon/PaimonUtil.java +++ b/fe/src/main/java/org/apache/impala/catalog/paimon/PaimonUtil.java @@ -20,7 +20,7 @@ package org.apache.impala.catalog.paimon; import static org.apache.impala.catalog.Table.isExternalPurgeTable; import static org.apache.paimon.CoreOptions.PARTITION_DEFAULT_NAME; -import static org.apache.paimon.CoreOptions.PARTITION_GENERATE_LEGCY_NAME; +import static org.apache.paimon.CoreOptions.PARTITION_GENERATE_LEGACY_NAME; import static org.apache.paimon.utils.HadoopUtils.HADOOP_LOAD_DEFAULT_CONFIG; import com.google.common.base.Preconditions; @@ -825,7 +825,7 @@ public class PaimonUtil { InternalRowPartitionComputer computer = new InternalRowPartitionComputer(options.get(PARTITION_DEFAULT_NAME), table.rowType(), table.partitionKeys().toArray(new String[0]), - options.get(PARTITION_GENERATE_LEGCY_NAME)); + options.get(PARTITION_GENERATE_LEGACY_NAME)); for (Split split : plan.splits()) { if (!(split instanceof DataSplit)) continue;