Apache Hadoop Third-party Libs Changelog

Release thirdparty-1.4.0 - 2025-03-21

BUG FIXES:

JIRA Summary Priority Component Reporter Contributor
HADOOP-19360 Disable releases for apache.snapshots repo Major build Attila Doroszlai Attila Doroszlai
HADOOP-19510 Correct hadoop-thirdparty license and site for protobuf 3.25.5 Major documentation Chris Nauroth Chris Nauroth

OTHER:

JIRA Summary Priority Component Reporter Contributor
HADOOP-19289 upgrade to protobuf-java 3.25.5 due to CVE-2024-7254 Major common PJ Fanning PJ Fanning
HADOOP-19300 upgrade hadoop thirdparty avro to 1.11.4 Major build PJ Fanning Steve Loughran