presto
presto copied to clipboard
upgrade kafka version to 3.9.1 in response to CVE-2025-27817
Description
This PR is for upgrading the Kafka version to the version 3.9.1 . This fixes CVE-2025-27817.
Motivation and Context
Impact
Test Plan
Contributor checklist
- [ ] Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
- [ ] PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
- [ ] Documented new properties (with its default value), SQL syntax, functions, or other functionality.
- [ ] If release notes are required, they follow the release notes guidelines.
- [ ] Adequate tests were added if applicable.
- [ ] CI passed.
Release Notes
Please follow release notes guidelines and fill in the release notes below.
== RELEASE NOTES ==
Security Changes
* Upgrade kafka to 3.9.1 in response to `CVE-2025-27817 <https://github.com/advisories/GHSA-vgq5-3255-v292>`_. :pr:`25312`
@ethanyzhang imported this issue as lakehouse/presto #25312
@namya28 , Please check and fix the CI pipeline failures