908648 – net-misc/kafka-bin: bundles vulnerable version of snappy-java

Bug 908648 - net-misc/kafka-bin: bundles vulnerable version of snappy-java

Summary: net-misc/kafka-bin: bundles vulnerable version of snappy-java

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Patrick Lauer

URL:
Whiteboard:	?? [noglsa]
Keywords:

Depends on:
Blocks:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Volkmar W. Pogatzki 2023-06-17 08:33:19 UTC

$ tar ft kafka_2.13-3.4.0.tgz | grep snappy
kafka_2.13-3.4.0/libs/snappy-java-1.1.8.4.jar

Comment 1 Patrick Lauer gentoo-dev

2023-06-17 15:23:53 UTC

3.5.0 has a new enough snappy, added in e72a70e4c4e750b23ce8c6da08cc10aef404aca2