[FLINK-22208] Bump snappy-java to 1.1.5+ - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 1.11.4, 1.13.0, 1.12.3
Component/s: Build System
Labels:
- pull-request-available

Description

https://nvd.nist.gov/vuln/detail/CVE-2018-7577

The relevant commit in the underlying snappy version is https://github.com/google/snappy/commit/3c706d22306efbd0d6ac050cb48179e1dcfbff7a

Attachments

Issue Links

links to

GitHub Pull Request #15579

Activity

People

Assignee:: Chesnay Schepler

Reporter:: Chesnay Schepler

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 12/Apr/21 07:55

Updated:: 28/Aug/21 11:15

Resolved:: 19/Apr/21 12:27