[
https://issues.apache.org/jira/browse/CASSANDRA-21776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18138532#comment-18138532
]
Mohammad Suhel commented on CASSANDRA-21776:
--------------------------------------------
Hi [~bernardo.botella], raised PRs for all branches:
4.0: [https://github.com/apache/cassandra/pull/5357]
4.1: [https://github.com/apache/cassandra/pull/5372]
5.0: [https://github.com/apache/cassandra/pull/5373]
6.0: [https://github.com/apache/cassandra/pull/5374]
trunk: [https://github.com/apache/cassandra/pull/5375]
Each PR has the same version bump (1.1.10.4 -> 1.1.10.12) plus the regenerated
ide/nbproject/project.xml. The compression, commitlog, hints and native
protocol compression tests pass locally on all
branches, and on 4.0 I also checked on a local node that data written with
1.1.10.4 reads, compacts and verifies fine with 1.1.10.12.
> Update snappy--java to 1.1.10.10 or later
> -----------------------------------------
>
> Key: CASSANDRA-21776
> URL: https://issues.apache.org/jira/browse/CASSANDRA-21776
> Project: Apache Cassandra
> Issue Type: Task
> Reporter: Éder Costa
> Assignee: Mohammad Suhel
> Priority: Normal
> Time Spent: 50m
> Remaining Estimate: 0h
>
> Update snappy--java to 1.1.10.10 or later in order to remove the vulnerable
> code related to the CVEs:
> CVE-2026-108104, CVE-2026-90559, CVE-2026-93451, CVE-2026-93452.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
