[ZOOKEEPER-4751] Update snappy-java to 1.1.10.5 to address CVE-2023-43642

• Type: Task
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.7.2, 3.8.3, 3.9.1
• Labels: pull-request-available
• Assignee: Damien Diederen
• Reporter: Lari Hotari
• Created: 30/Sep/23 16:51
• Updated: 09/Oct/23 11:24
• Resolved: 03/Oct/23 14:03

Description

snappy-java 1.1.10.1 contains CVE-2023-43642 . Upgrade the dependency to 1.1.10.5 to get rid of the CVE.

 

Issue Links

• links to: GitHub Pull Request #2072