This is an automated email from the ASF dual-hosted git repository.
stevel pushed a commit to branch branch-3.3
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.3 by this push:
new 384891ceeaf HADOOP-18782. Upgrade to snappy-java 1.1.10.1 due to CVEs
(#5773)
384891ceeaf is described below
commit 384891ceeaf8ffe52d87cb9e1cabf06da7842961
Author: PJ Fanning <pjfann...@users.noreply.github.com>
AuthorDate: Tue Jun 27 11:53:02 2023 +0100
HADOOP-18782. Upgrade to snappy-java 1.1.10.1 due to CVEs (#5773)
Addresses CVE-2023-34454
Contributed by PJ Fanning
---
LICENSE-binary | 2 +-
hadoop-project/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index 4c53859f08e..8821bee0935 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -365,7 +365,7 @@ org.jetbrains.kotlin:kotlin-stdlib:1.4.10
org.jetbrains.kotlin:kotlin-stdlib-common:1.4.10
org.lz4:lz4-java:1.7.1
org.objenesis:objenesis:2.6
-org.xerial.snappy:snappy-java:1.1.8.2
+org.xerial.snappy:snappy-java:1.1.10.1
org.yaml:snakeyaml:2.0
org.wildfly.openssl:wildfly-openssl:1.1.3.Final
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index e7e21a44f08..8208eaa210f 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -144,7 +144,7 @@
<metrics.version>3.2.4</metrics.version>
<netty3.version>3.10.6.Final</netty3.version>
<netty4.version>4.1.89.Final</netty4.version>
- <snappy-java.version>1.1.8.2</snappy-java.version>
+ <snappy-java.version>1.1.10.1</snappy-java.version>
<lz4-java.version>1.7.1</lz4-java.version>
<!-- Maven protoc compiler -->
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org
