[fix][sec] Upgrade snappy-java to address multiple CVEs (#20604)
(cherry picked from commit 62a99ed1c9c602ca35607e2141d3772734d4c5b7)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 4b8534a..3d07f16 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -480,7 +480,7 @@
- org.apache.zookeeper-zookeeper-jute-3.8.1.jar
- org.apache.zookeeper-zookeeper-prometheus-metrics-3.8.1.jar
* Snappy Java
- - org.xerial.snappy-snappy-java-1.1.8.4.jar
+ - org.xerial.snappy-snappy-java-1.1.10.1.jar
* Google HTTP Client
- com.google.http-client-google-http-client-gson-1.41.0.jar
- com.google.http-client-google-http-client-1.41.0.jar
diff --git a/pom.xml b/pom.xml
index b63af05..84a5bba 100644
--- a/pom.xml
+++ b/pom.xml
@@ -137,7 +137,7 @@
<zookeeper.version>3.8.1</zookeeper.version>
<commons-cli.version>1.5.0</commons-cli.version>
<commons-text.version>1.10.0</commons-text.version>
- <snappy.version>1.1.8.4</snappy.version> <!-- ZooKeeper server -->
+ <snappy.version>1.1.10.1</snappy.version> <!-- ZooKeeper server -->
<dropwizardmetrics.version>4.1.12.1</dropwizardmetrics.version> <!-- ZooKeeper server -->
<curator.version>5.1.0</curator.version>
<netty.version>4.1.93.Final</netty.version>
diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
index 0623c0a..d56b87a 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -454,7 +454,7 @@
* JSON Simple
- json-simple-1.1.1.jar
* Snappy
- - snappy-java-1.1.8.4.jar
+ - snappy-java-1.1.10.1.jar
* Jackson
- jackson-module-parameter-names-2.14.2.jar
* Java Assist
