[fix][sec] Upgrade snappy-java to 1.1.10.5 (#21280)

apache · Oct 3, 2023 · 643428b · 643428b
1 parent 07f4eb3
commit 643428b
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -484,7 +484,7 @@ The Apache Software License, Version 2.0
     - org.apache.zookeeper-zookeeper-jute-3.8.1.jar
     - org.apache.zookeeper-zookeeper-prometheus-metrics-3.8.1.jar
   * Snappy Java
-    - org.xerial.snappy-snappy-java-1.1.10.1.jar
+    - org.xerial.snappy-snappy-java-1.1.10.5.jar
   * Google HTTP Client
     - com.google.http-client-google-http-client-gson-1.41.0.jar
     - com.google.http-client-google-http-client-1.41.0.jar

diff --git a/pom.xml b/pom.xml
@@ -137,7 +137,7 @@ flexible messaging model and an intuitive client API.</description>
     <zookeeper.version>3.8.1</zookeeper.version>
     <commons-cli.version>1.5.0</commons-cli.version>
     <commons-text.version>1.10.0</commons-text.version>
-    <snappy.version>1.1.10.1</snappy.version> <!-- ZooKeeper server -->
+    <snappy.version>1.1.10.5</snappy.version> <!-- ZooKeeper server -->
     <dropwizardmetrics.version>4.1.12.1</dropwizardmetrics.version> <!-- ZooKeeper server -->
     <curator.version>5.1.0</curator.version>
     <netty.version>4.1.99.Final</netty.version>

diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
@@ -458,7 +458,7 @@ The Apache Software License, Version 2.0
   * JSON Simple
     - json-simple-1.1.1.jar
   * Snappy
-    - snappy-java-1.1.10.1.jar
+    - snappy-java-1.1.10.5.jar
   * Jackson
     - jackson-module-parameter-names-2.14.2.jar
   * Java Assist