80458d18fa
### What changes were proposed in this pull request? upgrade snappy-java from 1.1.8.2 to 1.1.10.5 reducing direct CVE vulnerabilities ### Why are the changes needed? The snappy-java 1.1.8.2 version has the follow CVE vulnerabilities, see https://scout.docker.com/vulnerabilities/id/CVE-2023-43642 https://scout.docker.com/vulnerabilities/id/CVE-2023-34455 ### Does this PR introduce _any_ user-facing change? No any user-facing change ### How was this patch tested? `./build/make-distribution.sh` to package and run test on the local Closes #2143 from dev-lpq/update_snappy_java. Authored-by: pengqli <pengqli@cisco.com> Signed-off-by: zky.zhoukeyong <zky.zhoukeyong@alibaba-inc.com> |
||
|---|---|---|
| .. | ||
| deps | ||
| checkout_pr.sh | ||
| dependencies.sh | ||
| merge_pr.py | ||
| reformat | ||