[
https://issues.apache.org/jira/browse/HADOOP-19782?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18135410#comment-18135410
]
ASF GitHub Bot commented on HADOOP-19782:
-----------------------------------------
txangel opened a new pull request, #8900:
URL: https://github.com/apache/hadoop/pull/8900
### Description of PR
Upgrade snappy-java to address CVE-2026-108106.
Ticket: HADOOP-19782
This is a refresh of https://github.com/apache/hadoop/pull/8178
### How was this patch tested?
Existing tests cover compression well.
Fast-tracking this patch to my environments where it is working fine.
### For code changes:
- [ Y ] Does the title of this PR start with the corresponding JIRA issue id
(e.g. 'HADOOP-17799. Your PR title ...')?
- [ NA ] Object storage: Have the integration tests been executed and the
endpoint
declared according to the connector-specific documentation? *Note:
Automated CI
testing doesn't cover all cases so manual testing with cloud storage
is still
required.*
- [ NA ] If adding new dependencies to the code, are these dependencies
licensed in a way that is compatible for inclusion under [ASF
2.0](http://www.apache.org/legal/resolved.html#category-a)?
- [ NA ] If applicable, have you updated the `LICENSE`, `LICENSE-binary`,
`NOTICE-binary` files?
### AI Tooling
If an AI tool was used:
Artisanal PR crafted by a human. I changed 4 bits of code, I can still
manage that.
- [ N ] The PR includes the phrase "Contains content generated by <tool>"
where <tool> is the name of the AI tool used.
- [ Y ] My use of AI contributions follows the ASF legal policy
https://www.apache.org/legal/generative-tooling.html
> updated compression library versions for OSS
> --------------------------------------------
>
> Key: HADOOP-19782
> URL: https://issues.apache.org/jira/browse/HADOOP-19782
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 3.4.2
> Reporter: Edward Capriolo
> Priority: Major
> Labels: pull-request-available
>
> Compression APIs need constant freshening:
> <snappy-java.version>1.1.10.4</snappy-java.version>
> <lz4-java.version>1.9.0</lz4-java.version>
> <snappy-java.version>1.1.10.8</snappy-java.version>
> <lz4-java.version>1.10.2</lz4-java.version>
>
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
