You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Divij Vaidya (Jira)" <ji...@apache.org> on 2023/09/26 08:34:00 UTC

[jira] [Resolved] (KAFKA-15504) Upgrade snappy java to version 1.1.10.4

     [ https://issues.apache.org/jira/browse/KAFKA-15504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Divij Vaidya resolved KAFKA-15504.
----------------------------------
    Resolution: Duplicate

Closing as duplicate of prior ticket https://issues.apache.org/jira/browse/KAFKA-15498. 

> Upgrade snappy java to version 1.1.10.4
> ---------------------------------------
>
>                 Key: KAFKA-15504
>                 URL: https://issues.apache.org/jira/browse/KAFKA-15504
>             Project: Kafka
>          Issue Type: Improvement
>            Reporter: Said BOUDJELDA
>            Assignee: Said BOUDJELDA
>            Priority: Major
>
> The version 1.1.10.4 contains a fix of [CVE-2023-43642|https://github.com/xerial/snappy-java/security/advisories/GHSA-55g7-9cwv-5qfv] as mentioned on the release notes of the library [https://github.com/xerial/snappy-java/releases/tag/v1.1.10.4]  Fixed SnappyInputStream so as not to allocate too large memory when decompressing data with an extremely large chunk size by
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)