Skip to content

CASSANDRA-21678: Upgrade zstd-jni to 1.5.7-15 - #5166

Open
arvindKandpal-ksolves wants to merge 1 commit into
apache:trunkfrom
arvindKandpal-ksolves:CASSANDRA-21678
Open

arvindKandpal-ksolves wants to merge 1 commit into
apache:trunkfrom
arvindKandpal-ksolves:CASSANDRA-21678

Conversation

@arvindKandpal-ksolves

@arvindKandpal-ksolves arvindKandpal-ksolves commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Problem

zstd-jni 1.5.7-2 is affected by CVE-2026-87795, CVE-2026-87825, and CVE-2026-87823.

Fix

Upgrade zstd-jni to 1.5.7-15 across all 4 platform classifiers (linux_amd64, linux_aarch64, darwin_x86_64, darwin_aarch64).

Changes

  • .build/parent-maven-pom.xml: bumped version for all 4 zstd-jni dependencies
  • ide/nbproject/project.xml: regenerated via update-netbeans-classpaths.sh

The Cassandra Jira

@arvindKandpal-ksolves arvindKandpal-ksolves changed the title CASSANDRA-21678: Upgrade zstd-jni to 1.5.7-14 CASSANDRA-21678: Upgrade zstd-jni to 1.5.7-15 Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants