[HADOOP-18912] upgrade snappy-java to 1.1.10.4 due to CVE

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.6
• Fix Version/s: 3.4.0, 3.3.9
• Component/s: build
• Labels: pull-request-available
• Target Version/s: 3.4.0
• Hadoop Flags: Reviewed
• Assignee: PJ Fanning
• Reporter: PJ Fanning
• Created: 25/Sep/23 16:53
• Updated: 21/Jan/24 02:26
• Resolved: 28/Sep/23 05:53

Description

follow up to HADOOP-18782

https://github.com/xerial/snappy-java/security/advisories/GHSA-55g7-9cwv-5qfv

Issue Links

• relates to: HADOOP-18782 upgrade to snappy-java 1.1.10.1 due to CVEs
• links to: GitHub Pull Request #6115
• links to: GitHub Pull Request #6160