[GH-15752] Upgrade snappy-java in Main and Steam Standalone Jar

h2oai · Sep 13, 2023 · e69f37d · e69f37d
1 parent 458c011
commit e69f37d
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -56,6 +56,11 @@ dependencies {
             because 'Fixes CVE-2020-8908'
             because 'Fixes CVE-2018-10237'
         }
+        api('org.xerial.snappy:snappy-java:1.1.10.3') {
+            because 'Fixes CVE-2023-34455'
+            because 'Fixes CVE-2023-34454'
+            because 'Fixes CVE-2023-34453'
+        }
     }
 }
 

diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
@@ -72,6 +72,11 @@ dependencies {
             because 'Fixes CVE-2020-8908'
             because 'Fixes CVE-2018-10237'
         }
+        api('org.xerial.snappy:snappy-java:1.1.10.3') {
+            because 'Fixes CVE-2023-34455'
+            because 'Fixes CVE-2023-34454'
+            because 'Fixes CVE-2023-34453'
+        }
     }
 }