Repository navigation

release: Suppress CVEs that are not applicable to Druid 38 - #20335

Merged

kfaraz merged 20 commits into

38.0.0from

38.0.0-fix-cves

Sep 21, 2026

Merged

release: Suppress CVEs that are not applicable to Druid 38#20335
kfaraz merged 20 commits into
38.0.0from
38.0.0-fix-cves

Commits on Sep 14, 2026
- Suppress CVEs that are not applicable to Druid
  kfaraz
  committed
  bf5de82
- Merge branch '38.0.0' of github.com:apache/druid into 38.0.0-fix-cves
  kfaraz
  committed
  9380803
- A few more CVEs remaining in this branch
  kfaraz
  committed
  bd7681e
Commits on Sep 15, 2026
- Apply batched suggestions from code review
  
  kfaraz
  and
  Copilot
  authored
  e58a48e
- Potential fix for pull request finding
  
  kfaraz
  and
  Copilot
  authored
  a730454
- Merge branch '38.0.0' of github.com:apache/druid into 38.0.0-fix-cves
  kfaraz
  committed
  f19e43b
- Merge branch '38.0.0' of github.com:apache/druid into 38.0.0-fix-cves
  kfaraz
  committed
  4f536ad
Commits on Sep 16, 2026
- Suppress snappy CVE
  kfaraz
  committed
  bb3811b
- Merge branch '38.0.0' of github.com:apache/druid into 38.0.0-fix-cves
  kfaraz
  committed
  bce18e5
Commits on Sep 17, 2026
- Potential fix for pull request finding
  
  kfaraz
  and
  Copilot
  authored
  d428487
- Potential fix for pull request finding
  
  kfaraz
  and
  Copilot
  authored
  fea95da
- Add --fail-never so that all modules are scanned
  kfaraz
  committed
  13755d1
- ci: suppress CVE-2026-73334 for parquet crypto.keytools (not used by Druid)
  
  kfaraz
  and
  claude
  committed
  0d63dc0
- Merge branch '38.0.0' of github.com:apache/druid into 38.0.0-fix-cves
  kfaraz
  committed
  235b742
Commits on Sep 18, 2026
- Potential fix for pull request finding
  
  kfaraz
  and
  Copilot
  authored
  8062ec6
- Fix up stuff
  kfaraz
  committed
  c5c7abf
- Broaden parquet CVE-2026-73334 suppression
  kfaraz
  committed
  e5ba9b9
Commits on Sep 21, 2026
- ci: suppress ZooKeeper server-side CVEs not reachable from Druid's ZK client
  
  kfaraz
  and
  claude
  committed
  7aeab25
- Include jute
  kfaraz
  committed
  8d5e188
- Revert extra change
  kfaraz
  committed
  955759e

Commits

Commits on Sep 14, 2026

Commits on Sep 15, 2026

Commits on Sep 16, 2026

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Commits on Sep 21, 2026