Rich-T-kid commented on PR #11922: URL: https://github.com/apache/arrow-rs/pull/11922#issuecomment-6423748064
> I haven't looked into the details of the advisories yet, but are we sure the parquet crate also does not use affected apis? parquet resolves to zstd 0.14.3 and zstd-safe 8.2.0, which are the patched versions. The zstd 0.13.3 dependency only comes through arrow-flight’s cli feature via tonic. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
