[FLINK-32371] Bump snappy-java to 1.1.10.1

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.16.2, 1.18.0, 1.17.1
• Fix Version/s: 1.18.0, 1.16.3, 1.17.2
• Component/s: Build System
• Labels: pull-request-available
• Assignee: Ryan Skraba
• Reporter: Ryan Skraba
• Created: 16/Jun/23 18:38
• Updated: 20/Jun/23 06:03
• Resolved: 20/Jun/23 06:03

Description

There is a CVE in all versions of snappy prior to 1.1.10.1 https://nvd.nist.gov/vuln/detail/CVE-2023-34455

Issue Links

• links to: GitHub Pull Request #22815
• links to: GitHub Pull Request #22822
• links to: GitHub Pull Request #22823