Skip to content

Conversation

@edwardcapriolo
Copy link
Contributor

Description of PR

Compression libraries tend to attract security researchers. So we update them.

How was this patch tested?

Existing tests cover compression well.

For code changes:

  • [Y ] Does the title or this PR starts with the corresponding JIRA issue id (e.g. 'HADOOP-17799. Your PR title ...')?
  • [NA ] Object storage: have the integration tests been executed and the endpoint declared according to the connector-specific documentation?
  • [ NA] If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?
  • [ NA] If applicable, have you updated the LICENSE, LICENSE-binary, NOTICE-binary files?

AI Tooling

No ai was used in the making of this PR, no clouds were injured.
If an AI tool was used:

Copy link
Contributor

@cnauroth cnauroth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like lz4-java was already updated in #8122. If you want to refresh the patch, we can go ahead with upgrading just snappy-java though. We'll also need to update the license information here:

https://github.com/apache/hadoop/blob/trunk/LICENSE-binary#L431

@edwardcapriolo
Copy link
Contributor Author

@cnauroth we need to change the lic

It looks like lz4-java was already updated in #8122. If you want to refresh the patch, we can go ahead with upgrading just snappy-java though. We'll also need to update the license information here:

https://github.com/apache/hadoop/blob/trunk/LICENSE-binary#L431

For crying out loud :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants