Changelog category (leave one):

• Bug Fix (user-visible misbehavior in an official stable release)

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

1. The ClickHouse/contrib/orc should be updated from version 2.1.0 to 2.1.2 to remediate the CVE: CVE-2025-47436.
2. orc version 2.1.2 does NOT have the proto directory and hence a dummy orc_proto.proto file had to be created in the contrib/arrow-cmake directory.
3. In orc 2.1.2, a unique_ptr was expected while creating the orc::SearchArgument object as compared to the shared_ptr for older orc 2.1.0

Documentation entry for user-facing changes

• Documentation is written (mandatory for new features)

1. The ClickHouse/contrib/orc should be updated from version 2.1.0 to 2.1.2 to remediate the CVE: CVE-2025-47436.
2. orc version 2.1.2 does NOT have the proto directory and hence a dummy orc_proto.proto file had to be created in the contrib/arrow-cmake directory.
3. In orc 2.1.2, a unique_ptr was expected while creating the orc::SearchArgument object as compared to the shared_ptr for older orc 2.1.0