From 02a00d77dd5ffede667dda913bd781d085ab3543 Mon Sep 17 00:00:00 2001
From: Keerthana Srikanth <ksrikanth@confluent.io>
Date: Wed, 15 Nov 2023 12:41:39 +0530
Subject: [PATCH] Revert "PRSP-3603 Bump org.xerial.snappy:snappy-java to
 latest version to address CVEs (#164)" (#166)

This reverts commit 185d6559eedefee2c0a17eda7cb5750b2997710c.
---
 licenses.yaml | 6 +++---
 pom.xml       | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/licenses.yaml b/licenses.yaml
index 4ce3061aacb8..0632e36f7fda 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -3115,7 +3115,7 @@ name: snappy-java
 license_category: binary
 module: hadoop-client
 license_name: Apache License version 2.0
-version: 1.1.10.5
+version: 1.0.4.1
 libraries:
   - org.xerial.snappy: snappy-java
 notices:
@@ -3565,7 +3565,7 @@ name: snappy-java
 license_category: binary
 module: extensions/druid-kafka-indexing-service
 license_name: Apache License version 2.0
-version: 1.1.10.5
+version: 1.1.8.4
 libraries:
   - org.xerial.snappy: snappy-java
 
@@ -4774,7 +4774,7 @@ libraries:
 
 name: snappy-java
 license_category: binary
-version: 1.1.10.5
+version: 1.1.8.4
 module: druid-ranger-security
 license_name: Apache License version 2.0
 libraries:
diff --git a/pom.xml b/pom.xml
index ba14853a61f2..6cf4ed347680 100644
--- a/pom.xml
+++ b/pom.xml
@@ -815,7 +815,7 @@
             <dependency>
                 <groupId>org.xerial.snappy</groupId>
                 <artifactId>snappy-java</artifactId>
-                <version>1.1.10.5</version>
+                <version>1.1.8.4</version>
             </dependency>
             <dependency>
                 <groupId>com.google.protobuf</groupId>