nprasad2077/kafka
1
0 Fork 0
mirror of https://github.com/apache/kafka.git synced 2026-11-04 15:02:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

KAFKA-21123: bump zstd-jni (#23506)

Browse Source 
Looks like there are a bunch of recently reported CVEs involving
zstd-jni. Bumping to latest version to mitigate
E.g. https://nvd.nist.gov/vuln/detail/cve-2026-90560

Verified completion levels are still the same
https://raw.githubusercontent.com/facebook/zstd/v1.5.7/lib/compress/clevels.h

Reviewers: Ken Huang <s7133700@gmail.com>
This commit is contained in:
Gergely Harmadas authored and Chia-Ping Tsai committed 2026-09-29 00:13:14 +08:00
1 parent 223d2aae4c
commit 58c8fcbcff
3 files changed
+4 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

LICENSE-binary
+1 -1
View File
@@ -301,7 +301,7 @@ MIT License
---------------------------------------
BSD 2-Clause
- zstd-jni-1.5.6-10, see: licenses/zstd-jni-BSD-2-clause
- zstd-jni-1.5.7-17, see: licenses/zstd-jni-BSD-2-clause
- HdrHistogram-2.2.2, see: licenses/hdrHistogram-BSD-2-clause
---------------------------------------
docker/native/native-image-configs/resource-config.json
+2 -2
View File
@@ -71,9 +71,9 @@
}, {
"pattern":"\\Qkafka/kafka-version.properties\\E"
}, {
"pattern":"\\Qlinux/aarch64/libzstd-jni-1.5.6-10.so\\E"
"pattern":"\\Qlinux/aarch64/libzstd-jni-1.5.7-17.so\\E"
}, {
"pattern":"\\Qlinux/amd64/libzstd-jni-1.5.6-10.so\\E"
"pattern":"\\Qlinux/amd64/libzstd-jni-1.5.7-17.so\\E"
}, {
"pattern":"\\Qlog4j2.StatusLogger.properties\\E"
}, {
gradle/dependencies.gradle
+1 -1
View File
@@ -136,7 +136,7 @@ versions += [
zinc: "1.12.0",
// When updating the zstd version, please do as well in docker/native/native-image-configs/resource-config.json
// Also make sure the compression levels in org.apache.kafka.common.record.CompressionType are still valid
zstd: "1.5.6-10",
zstd: "1.5.7-17",
junitPlatform: "1.14.4",
hdrHistogram: "2.2.2",
hash4j: "0.22.0"