This is an automated email from the ASF dual-hosted git repository.
zike pushed a commit to branch branch-3.0
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-3.0 by this push:
new 0cd4bed49f4 [fix][sec] Upgrade snappy-java to address multiple CVEs
(#20604)
0cd4bed49f4 is described below
commit 0cd4bed49f49b0f5906968e0b6785a74d1f3e409
Author: Lari Hotari <[email protected]>
AuthorDate: Tue Jun 20 19:36:57 2023 +0300
[fix][sec] Upgrade snappy-java to address multiple CVEs (#20604)
(cherry picked from commit 62a99ed1c9c602ca35607e2141d3772734d4c5b7)
---
distribution/server/src/assemble/LICENSE.bin.txt | 2 +-
pom.xml | 2 +-
pulsar-sql/presto-distribution/LICENSE | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index 4b8534a1650..3d07f168cb1 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -480,7 +480,7 @@ The Apache Software License, Version 2.0
- org.apache.zookeeper-zookeeper-jute-3.8.1.jar
- org.apache.zookeeper-zookeeper-prometheus-metrics-3.8.1.jar
* Snappy Java
- - org.xerial.snappy-snappy-java-1.1.8.4.jar
+ - org.xerial.snappy-snappy-java-1.1.10.1.jar
* Google HTTP Client
- com.google.http-client-google-http-client-gson-1.41.0.jar
- com.google.http-client-google-http-client-1.41.0.jar
diff --git a/pom.xml b/pom.xml
index b63af058180..84a5bbaad1a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -137,7 +137,7 @@ flexible messaging model and an intuitive client
API.</description>
<zookeeper.version>3.8.1</zookeeper.version>
<commons-cli.version>1.5.0</commons-cli.version>
<commons-text.version>1.10.0</commons-text.version>
- <snappy.version>1.1.8.4</snappy.version> <!-- ZooKeeper server -->
+ <snappy.version>1.1.10.1</snappy.version> <!-- ZooKeeper server -->
<dropwizardmetrics.version>4.1.12.1</dropwizardmetrics.version> <!--
ZooKeeper server -->
<curator.version>5.1.0</curator.version>
<netty.version>4.1.93.Final</netty.version>
diff --git a/pulsar-sql/presto-distribution/LICENSE
b/pulsar-sql/presto-distribution/LICENSE
index 0623c0a306f..d56b87a3fb7 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -454,7 +454,7 @@ The Apache Software License, Version 2.0
* JSON Simple
- json-simple-1.1.1.jar
* Snappy
- - snappy-java-1.1.8.4.jar
+ - snappy-java-1.1.10.1.jar
* Jackson
- jackson-module-parameter-names-2.14.2.jar
* Java Assist
