Merge pull request #15753 from h2oai/mn/GH-15752

[GH-15752] Upgrade snappy-java in Main and Steam Standalone Jar
h2oai · Sep 15, 2023 · f6d120b · f6d120b
2 parents 477ebc8 + 4991048
commit f6d120b
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -76,6 +76,11 @@ dependencies {
         api('com.squareup.okio:okio:3.5.0') {
             because 'Fixes CVE-2023-3635'
         }
+        api('org.xerial.snappy:snappy-java:1.1.10.3') {
+            because 'Fixes CVE-2023-34455'
+            because 'Fixes CVE-2023-34454'
+            because 'Fixes CVE-2023-34453'
+        }
     }
 }
 

diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
@@ -77,6 +77,11 @@ dependencies {
         api('com.squareup.okio:okio:3.5.0') {
             because 'Fixes CVE-2023-3635'
         }
+        api('org.xerial.snappy:snappy-java:1.1.10.3') {
+            because 'Fixes CVE-2023-34455'
+            because 'Fixes CVE-2023-34454'
+            because 'Fixes CVE-2023-34453'
+        }
     }
 }