geyanggang opened a new issue, #11084: URL: https://github.com/apache/gravitino/issues/11084
### What would you like to be improved? snappy-java 1.1.8.2 is pulled transitively by Hive Metastore into the runtime classpath of `hive-metastore2-libs` and `hive-metastore3-libs`. This version has known issues with buffer overflow and unchecked chunk length handling in the decompression path. Upgrading to 1.1.10.8 (latest stable) fixes these issues while maintaining API backward compatibility. ### How should we improve? Add snappy-java 1.1.10.8 to `gradle/libs.versions.toml` and add a dependency constraint in both hive-metastore-libs modules to force the transitive version upgrade. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
