CVE-2025-30065: Vulnerability

[Satish_Infa]

Please provide CVE-2025-30065: Vulnerability  patching for the HPE Ezmeral Cluster with below configuration.

https://package.ezmeral.hpe.com/releases/v7.9.0/rhel9

https://package.ezmeral.hpe.com/releases/MEP/MEP-9.3.2/redhat

[ParvYadav]

Hi @Satish_Infa,

Can you share the impacted path for this vulnerability.

Thanks,

Parv

[Satish_Infa]

please find the impacted path o Vulnerability

/opt/mapr/drill/drill-1.21.2/jars/3rdparty/parquet-avro-1.12.3.jar

[Poornasai]

Hi @Satish_Infa,

Can you please share the Enivoement details, core version and EEP version.

Regards,

Poorna Sai.

[Satish_Infa]

Cluster Details - https://invrh94maprnk01.informatica.com:8443 (mapr/mapr)

MapR – 7.9.0,  EEP – 9.3.2

[Poornasai]

Hi @Satish_Infa ,

To address this vulnerability in EEP-9.3.2 environments, please use the Drill EEP-9.3.1-EBF package.

The updated Drill packages are now available on SFTP under the following path:
/ecosystem/rpm/drill/mep-9.3.1/

Regards,

Poorna Sai.

[support_s]

Hello,

Let us know if you were able to resolve the issue.

If you are satisfied with the answers then kindly click the "Accept As Solution" button for the most helpful response so that it is beneficial to all community members.

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".