arvindKandpal-ksolves opened a new pull request, #8655: URL: https://github.com/apache/hbase/pull/8655
## What changes were proposed in this pull request? Bumps zstd-jni from 1.5.7-2 to 1.5.7-15 in pom.xml (branch-2.6). ## Why are the changes needed? zstd-jni versions prior to 1.5.7-14 contain vulnerable code addressed by: - CVE-2026-87795 - CVE-2026-87823 - CVE-2026-87825 ## Does this PR introduce any user-facing change? No. ## How was this patch tested? Ran the full zstd-jni compression test suite before and after the bump: TestWALCompressionZstd, TestZstdCodec, TestHFileCompressionZstd, TestZstdDictionary, TestZstdDictionarySplitMerge, TestZstdByteBuffDecompressor. Baseline (1.5.7-2): 15 tests run, 0 failures, 0 errors After bump (1.5.7-15): 15 tests run, 0 failures, 0 errors Verified via `mvn dependency:tree` that the resolved artifact is com.github.luben:zstd-jni:jar:1.5.7-15. Note: on branch-2.6, built with `-Dhadoop.profile=3.0` (required for JDK11+). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
