spark-4.1/4.1.0-r0: cve remediation

[octo-sts]

spark-4.1/4.1.0-r0: fix GHSA-c476-j253-5rgq

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/spark-4.1.advisories.yaml

---

"Breadcrumbs" for this automated service

• Source Code: https://go/cve-remedy-automation-source
• Logs: https://go/cve-remedy-automation-logs
• Docs: (not provided yet)

Inspected git repositories: https://github.com/apache/spark@v4.1.0

[octo-sts]

This vulnerability remediation is stale and no longer needed. 👋

Advisory CGA-rhx6-339v-m2r5 has the latest event type of "pending-upstream-fix": https://github.com/wolfi-dev/advisories/blob/main/spark-4.1.advisories.yaml

ID:      CGA-rhx6-339v-m2r5
Package: spark-4.1
Aliases: CVE-2024-29869 GHSA-c476-j253-5rgq
Events:
  - "scan/v1" at 2026-01-02 09:00:21 UTC
  - "pending-upstream-fix" at 2026-01-06 19:00:00 UTC