From 350cb44d146fdd489d6ee8ddc9d83e13fe1aaa15 Mon Sep 17 00:00:00 2001
From: eschcam <cameron.scholes@est.tech>
Date: Tue, 15 Jul 2025 16:51:09 +0100
Subject: [PATCH 1/2] [SPARK-52803][BUILD] Update aws-java-sdk-s3 to 1.12.261

Upgrading aws-java-sdk-s3 from 1.11.655 to 1.12.261 resolves the following vulnerability
https://osv.dev/vulnerability/GHSA-c28r-hw5m-5gv3
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 58f562a04628..20516be21711 100644
--- a/pom.xml
+++ b/pom.xml
@@ -158,7 +158,7 @@
     <avro.version>1.12.0</avro.version>
     <aws.kinesis.client.version>1.12.0</aws.kinesis.client.version>
     <!-- Should be consistent with Kinesis client dependency -->
-    <aws.java.sdk.version>1.11.655</aws.java.sdk.version>
+    <aws.java.sdk.version>1.12.261</aws.java.sdk.version>
     <aws.java.sdk.v2.version>2.29.52</aws.java.sdk.v2.version>
     <!-- the producer is used in tests -->
     <aws.kinesis.producer.version>0.12.8</aws.kinesis.producer.version>

From 9bae3d5d1ca31e986d4b646f202508a98aa9930c Mon Sep 17 00:00:00 2001
From: eschcam <cameron.scholes@est.tech>
Date: Tue, 15 Jul 2025 16:51:09 +0100
Subject: [PATCH 2/2] [SPARK-52803][BUILD] Update aws-java-sdk-sts to 1.12.720

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 20516be21711..da2ff8e97ce2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -158,7 +158,7 @@
     <avro.version>1.12.0</avro.version>
     <aws.kinesis.client.version>1.12.0</aws.kinesis.client.version>
     <!-- Should be consistent with Kinesis client dependency -->
-    <aws.java.sdk.version>1.12.261</aws.java.sdk.version>
+    <aws.java.sdk.version>1.12.720</aws.java.sdk.version>
     <aws.java.sdk.v2.version>2.29.52</aws.java.sdk.v2.version>
     <!-- the producer is used in tests -->
     <aws.kinesis.producer.version>0.12.8</aws.kinesis.producer.version>