[FLINK-33149] Bump snappy-java to 1.1.10.4

• Type: Technical Debt
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.18.0, 1.16.3, 1.17.2
• Fix Version/s: 1.18.0, kafka-3.1.0, 1.16.3, 1.17.2
• Component/s: API / Core, Connectors / AWS, Connectors / HBase, Connectors / Kafka, Stateful Functions
• Labels: pull-request-available
• Assignee: Ryan Skraba
• Reporter: Ryan Skraba
• Created: 25/Sep/23 08:18
• Updated: 26/Jan/24 12:56
• Resolved: 23/Nov/23 09:58

Description

Xerial published a security alert for a Denial of Service attack that exists on 1.1.10.1.

This is included in flink-dist, but also in flink-statefun, and several connectors.

Issue Links

• links to: GitHub Pull Request #34
• links to: GitHub Pull Request #341
• links to: GitHub Pull Request #23458
• links to: GitHub Pull Request #23459
• links to: GitHub Pull Request #23460
• links to: GitHub Pull Request #23461