Skip to content

HBASE-30496 Bump brotli4j to 1.24.0 to fix CVE-2026-111497 - #8817

Merged
PDavid merged 1 commit into
apache:masterfrom
macmaster:HBASE-30496
Oct 27, 2026
Merged

PDavid merged 1 commit into
apache:masterfrom
macmaster:HBASE-30496

Conversation

@macmaster

Copy link
Copy Markdown
Contributor

Brings in the fix for CVE-2026-111497 from hyperxpro/Brotli4j#273

Mainly could affect users using BROTLI compression. The risk of exploitation seems pretty low.

@PDavid PDavid left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Many thanks, looks good to me - pending tests. 👍

@PDavid
PDavid merged commit 17a6640 into apache:master Oct 27, 2026
8 checks passed
PDavid pushed a commit that referenced this pull request Oct 27, 2026
Co-authored-by: rmacmaster <rmacmaster@bloomberg.net>

Signed-off-by: Dávid Paksy <paksyd@apache.org>
(cherry picked from commit 17a6640)
PDavid pushed a commit that referenced this pull request Oct 27, 2026
Co-authored-by: rmacmaster <rmacmaster@bloomberg.net>

Signed-off-by: Dávid Paksy <paksyd@apache.org>
(cherry picked from commit 17a6640)
PDavid pushed a commit that referenced this pull request Oct 27, 2026
Co-authored-by: rmacmaster <rmacmaster@bloomberg.net>

Signed-off-by: Dávid Paksy <paksyd@apache.org>
(cherry picked from commit 17a6640)
PDavid pushed a commit that referenced this pull request Oct 27, 2026
Co-authored-by: rmacmaster <rmacmaster@bloomberg.net>

Signed-off-by: Dávid Paksy <paksyd@apache.org>
(cherry picked from commit 17a6640)
PDavid pushed a commit that referenced this pull request Oct 27, 2026
Co-authored-by: rmacmaster <rmacmaster@bloomberg.net>

Signed-off-by: Dávid Paksy <paksyd@apache.org>
(cherry picked from commit 17a6640)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants