CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

archivers/snappy-java 1.1.10.8_2

Fast compressor/decompressor library

Maintainer
language.devel@gmail.com
Packages
latest: 1.1.10.8_2
Upstream
up to date
Last update
to 1.1.10.8_2 · 806576185c
Quarterly
2026Q4: 1.1.10.8_2
WWW
https://github.com/xerial/snappy-java
Links
cgit · VuXML

Unaddressed (3)

The CVE record lists the packaged version 1.1.10.8_2 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-934528.72026-09-17snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Atta…
CVE-2026-905598.72026-09-12snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never vali…
CVE-2026-934516.92026-09-17snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allocate output arrays by dividing uncompressed lengt…

VuXML only (0)

Listed in VuXML, the packaged version 1.1.10.8_2 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (46)

Gleb Popov (arrowd) · 1.1.10.8_2
archivers/snappy-java: Fix building with CMake 4

Approved by:	portmgr (fixit blanket)
806576185c
Ronald Klop (ronald) · 1.1.10.8_2
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 1.1.10.8_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Vladimir Druzenko (vvd) · 1.1.10.8
archivers/snappy-java: Remove duplicate in distinfo

A bug in Makefile caused duplicate entries in distinfo after make makesum.

While here remove GH_TAGNAME - it have default value.

PR:		288452
Approved by:	Angelo Polo <language.devel@gmail.com> (maintainer, implicit)
Fixes:		88dd12d5f35c (Update 1.1.10.5 => 1.1.10.8)
Fixes:		ec69541aaaba (Update to 1.1.10.5)
8ff7a79fa6
Vladimir Druzenko (vvd) · 1.1.10.8
archivers/snappy-java: Update 1.1.10.5 => 1.1.10.8

Changelogs:
https://github.com/xerial/snappy-java/releases/tag/v1.1.10.6
https://github.com/xerial/snappy-java/releases/tag/v1.1.10.7
https://github.com/xerial/snappy-java/releases/tag/v1.1.10.8

Improve port:
- Switch from gz to xz in deps: reduce size in 1.6 times (235 => 144MiB)
- Move cmake from BUILD_DEPENDS to USES.
- Switch from hashes to tags in GH_TUPLE.
- Split long line.
- Replace PORTVERSION with DISTVERSION.
- Refresh patches.
- Refresh and remove upstreamed patches.

PR:		288452
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
88dd12d5f3
Piotr Kubaj (pkubaj) · 1.1.10.5_1
archivers/snappy-java: fix build on powerpc

Add necessary plumbing and avoid resource exhaustion.
93a5b0af88
Muhammad Moinur Rahman (bofh) · 1.1.10.5_1
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Ronald Klop (ronald) · 1.1.10.5_1
archivers/snappy-java: force disable NEON on armv7

Cross compilation might pick up NEON from the host aarch64 system
in our package build cluster.
This gave an error:
In file included from target/snappy-1.1.10/snappy.cc:29:
target/snappy-1.1.10/snappy-internal.h:107:10: error: use of undeclared identifier 'vqtbl1q_u8'; did you mean 'vtbl1_u8'?
  107 |   return vqtbl1q_u8(input, shuffle_mask);
      |          ^~~~~~~~~~
      |          vtbl1_u8

PR:	282272
Approved by:	Angelo Polo (maintainer) (via earlier comment in the PR)
806a884dc7
Ronald Klop (ronald) · 1.1.10.5_1
archivers/snappy-java: enable armv6 and armv7

PR:	282272
Approved by:	Angelo Polo (maintainer)
28a93b2755
Vladimir Druzenko (vvd) · 1.1.10.5
archivers/snappy-java: support build with OpenJDK 21

In Java 21 compiler removed support for source and target 1.7 (7).

PR:		280316
Approved by:	Angelo Polo <language.devel@gmail.com>
Obtained from:	https://github.com/xerial/snappy-java/issues/532
e4f0d70750
Ronald Klop (ronald) · 1.1.10.5
archivers/snappy-java: remove run_depends on openjdk8

This port is a library used by other Java ports. It does not run
itself so does not need a run_depends on openjdk8.
Solves: unifi7 currently installing openjdk11 and openjdk8 because of this.

Not bumping portrevision as it does not change the functionality of the port.

tested:
poudriere stage-qa: ok

PR: 274902
10316ebec7
Juraj Lutter (otis) · 1.1.10.5
archivers/snappy-java: Update to 1.1.10.5

PR:		268558
Reported by:	wcarson.bugzilla@disillusion.net
Co-authored-by:	Angelo Polo <language.devel@gmail.com>
ec69541aaa
Daniel Engberg (diizzy) · 1.1.7.5
*/*: Update path set in BUILD_DEPENDS for CMake

Commit b23ea4e2d2f51b53d8915fe9fd7b4efbdd575e38 changed its location to
devel/cmake-core

Approved by:	portmgr (blanket)
e942e560c4
Stefan Eßer (se) · 1.1.7.5
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.1.7.5
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.1.7.5
archivers: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Albert Vernon <f3cun3c02@sneakemail.com>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Kuehn <freebsd@nagilum.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Zhuravlev <zaa@zaa.pp.ru>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexey Dokuchaev <danfe@regency.nsu.ru>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andreev Maxim
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Chernov <ache@FreeBSD.org>
  *  Andrey Kostenko <andrey@kostenko.name>
  *  Anes Mukhametov <anes@anes.su>
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Ayumi M <ayu@commun.jp>
  *  Carsten Larsen <cs@innolan.dk>
  *  Chin-San Huang <chinsan.tw@gmail.com>
  *  Chris D. Faulhaber <jedgar@FreeBSD.org>
  *  Chris Larsen <darth@vader.dk>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Cyrille Lefevre <cyrille.lefevre@laposte.net>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Felix Palmen <felix@palmen-it.de>
  *  Gabor Kovesdan <gabor@FreeBSD.org>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Greg Lewis <glewis@FreeBSD.org>
  *  Hsin-Han You <hhyou@cs.nctu.edu.tw>
  *  Hye-Shik Chang
  *  Hye-Shik Chang <perky@FreeBSD.org>
  *  Igor Pokrovsky <tiamat@telegraph.spb.ru>
  *  Jaap Boender <jaapb@kerguelen.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeff Burchell <toxic@doobie.com>
  *  Jeffrey H. Johnson <CPE1704TKS@bellsouth.net>
  *  Jerry Hicks
  *  Joao Carlos Mendes Luis <jonny@jonny.eng.br>
  *  John Marino <marino@FreeBSD.org>
  *  José García Juanino <jjuanino@gmail.com>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  Kevin Golding <ports@caomhin.org>
  *  Konstantin Reznichenko <kot@premierbank.dp.ua>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Lars Thegler <lth@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Kane <mark@mkproductions.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matteo Cypriani <mcy@lm7.fr>
  *  Max Khon <fjoe@FreeBSD.org>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Melvyn Sopacua <melvyn@magemana.nl>
  *  Miguel Mendez <flynn@energyhq.homeip.net>
  *  Nathan Ahlstrom <nra@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Patrick Seal <patseal@hyperhost.net>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Per Wigren
  *  Philippe Casidy <pcasidy@casidy.com>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Poul-Henning Kamp <phk@FreeBSD.org>
  *  Radim Kolar
  *  Radim Kolar <hsn@filez.com>
  *  Radim Kolar <hsn@netmag.cz>
  *  Rainer Hurling <rhurlin@gwdg.de>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Roman Shterenzon <roman@xpert.com>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sam Lawrance <boris@brooknet.com.au>
  *  Sergey A. Osokin <osa@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sir l33tname <sirl33tname@gmail.com>
  *  Stanislav Sedov <ssedov@mbsd.msk.ru>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Abthorpe <thomas@goodking.ca>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Vanilla I. Shu <vanilla@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Will Andrews <andrews@technologist.com>
  *  Yarodin <yarodin@gmail.com>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  ache
  *  adamw
  *  antoine@FreeBSD.org
  *  bf <bf2006a@yahoo.com>
  *  chinsan <chinsan.tw@gmail.com>
  *  giffunip@asme.org
  *  gurkan@phys.ethz.ch
  *  iblis <iblis.dif01@nctu.edu.tw>
  *  ijliao
  *  jmz
  *  kwm@FreeBSD.org
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  mm
  *  ports@c0decafe.net <ports@c0decafe.net>
  *  samm@freebsd.org
  *  swhetzel@gmail.com
  *  will

With hat:	portmgr
1ced9d288a
Piotr Kubaj (pkubaj) · 1.1.7.5
archivers/snappy-java: fix build on powerpc64le
fd836055d6
Piotr Kubaj (pkubaj) · 1.1.7.5
archivers/snappy-java: fix build on powerpc64
7d26f0f538
Mathieu Arnold (mat) · 1.1.7.5
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mark Linimon (linimon) · 1.1.7.5
This now builds on powerpc64.

Approved by:	portmgr (tier-2 blanket)
370979cef8
Mikael Urankar (mikael) · 1.1.7.5
archivers/snappy-java: fix build on aarch64

PR:		247146
Submitted by:	Ronald Klop
Approved by:	Angelo Polo (maintainer)
defe12367f
Mathieu Arnold (mat) · 1.1.7.5
Regular USE_GITHUB cleanup.
fd11f3f038
Kurt Jaeger (pi) · 1.1.7.5
archivers/snappy-java: update 1.0.4.1 -> 1.1.7.5, submitter becomes maintainer

- Builds with sbt instead of maven
- Java 11 compatible
- Testing moved to test target
- Builds in poudriere with openjdk8 and openjdk11
- All tests pass
- All databases/cassandra4 tests using snappy-java pass

PR:		246348
Submitted by:	Angelo Polo <language.devel@gmail.com>
Relnotes:	https://github.com/xerial/snappy-java/blob/master/Milestone.md
f601c9b0e5
Jung-uk Kim (jkim) · 1.0.4.1_2
Clean up after java/openjdk6 and java/openjdk6-jre removal

java/openjdk6 support was removed from Mk/bsd.java.mk (r512662) and
java/openjdk6 and java/openjdk6-jre were removed from the ports tree
(r512663).  Now this patch completely removes remaining stuff from the
ports tree.

PR:			241953 (exp-run)
Reviewed by:		glewis
Approved by:		portmgr (antoine)
Differential Revision:	https://reviews.freebsd.org/D22342
5a52a08234
Jason Helfman (jgh) · 1.0.4.1_2
- shift hosting distfile at FreeBSD resources to SF
a14d7fe982
Adam Weinberger (adamw) · 1.0.4.1_2
Return Mark Dixon's ports to the heap.

He put a ton of work into these, so our thanks to him for giving us
all that time and effort.

Submitted by:	Mark Dixon
3a194db7cd
Mark Linimon (linimon) · 1.0.4.1_2
Mark as broken on powerpc64.  While here, pet portlint.

Failed to execute goal org.apache.maven.plugins:maven-surefire-plugin:2.14.1:test
  (default-test) on project snappy-java: Execution default-test of goal
  org.apache.maven.plugins:maven-surefire-plugin:2.14.1:test failed: The forked
  VM terminated without saying properly goodbye. VM crash or System.exit called ?

Approved by:	portmgr (tier-2 blanket)
0cebdd826f
Mark Linimon (linimon) · 1.0.4.1_2
For ports that are marked BROKEN on armv6, and also fail to build on armv7, mark them so.

This is part two of a multipart commit to bring armv7 ports to parity
with armv6.

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com -exp run
bf43557044
Mark Linimon (linimon) · 1.0.4.1_2
Mark some ports failing on armv6, for errors classified as "???".

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)
c095cd43d0
John Marino (marino) · 1.0.4.1_2
archivers/snappy-java: new fedora MASTER_SITE to unbreak
91b481df9c
Mathieu Arnold (mat) · 1.0.4.1_2
GOOGLE_CODE has gone away.

- If a port has another upstream, remove GOOGLE_CODE
- If a port only has GOOGLE_CODE mark it BROKEN

Some ports have a local mirror configured but for security reasons, it
is not considered upstream.

Sponsored by:	Absolight
dbbfc7889a
Mathieu Arnold (mat) · 1.0.4.1_2
Cleanup patches, a* categories.

Rename them to follow the make makepatch naming, and regenerate them.

With hat:	portmgr
Sponsored by:	Absolight
9fa9eb9ac7
Mathieu Arnold (mat) · 1.0.4.1_2
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.

With hat:	portmgr
Sponsored by:	Absolight
7f4572eae4
Kurt Jaeger (pi) · 1.0.4.1_2
archivers/snappy-java: force correct maven, submitter becomes maintainer

PR:		204666
Submitted by:	Mark Dixon <mark@tranquillussoftware.co.uk>
Approved by:	Radum Kolar <hsn@sendmail.cz> (maintainer)
d4053317e6
Mathieu Arnold (mat) · 1.0.4.1_2
Always set the DEFAULT github DISTFILE with .tar.gz for EXTRACT_SUFX.

Fix distinfo for the offending ports.

lang/yorick's tag was moved, and the added patch was no longer needed.

PR:			207644
Submitted by:		mat
Exp-run by by:		antoine
Sponsored by:		Absolight
Differential Revision:	https://reviews.freebsd.org/D4268
018eeadae5
Mark Felder (feld) · 1.0.4.1_2
archivers/snappy-java: Allow JAVA_VERSIONS 1.7+

This prevents duplicate java versions from being installed if a port
requires a newer jdk and snappy-java.

PR:		206240
Approved by:	maintainer timeout
923667c2a4
Mathieu Arnold (mat) · 1.0.4.1_1
Cleanup USE_GITHUB usage.

With hat:	portmgr
Sponsored by:	Absolight
90a49f0472
Mathieu Arnold (mat) · 1.0.4.1_1
Update ports in the a* categories to not use GH_COMMIT.

With minor cleanups to make things simpler.

With hat:	portmgr
Sponsored by:	Absolight
6e83422724
Bryan Drewery (bdrewery) · 1.0.4.1_1
Update USE_GITHUB so it does not require GH_COMMIT.

Using this new scheme allows only setting the _tag_ or _commit hash_ in
GH_TAGNAME and not having to know the hash for a tag.  This scheme will
download a tarball that has a different checksum than before due to a changed
directory name for extraction.

The following MASTER_SITES are provided to retain the old checksum and
directory structure (that require GH_COMMIT):
  GH -> GHL
  GITHUB -> GITHUB_LEGACY

Differential Revision:	https://reviews.freebsd.org/D748
Submitted by:	amdmi3
Reviewed by:	mat, swills, antoine, bdrewery
With hat:	portmgr
5b5a90256d
Baptiste Daroussin (bapt) · 1.0.4.1_1
Replace GMAKE by MAKE_CMD
ef49fa1572
Baptiste Daroussin (bapt) · 1.0.4.1_1
Simplification and cleanup of the port
6a84798a29
Pawel Pekala (pawel) · 1.0.4.1_1
- Install native library [1] - Support staging

PR:		ports/185794 [1]
Submitted by:	Henry Hu <henry.hu.sh@gmail.com>
cc4b462793
Olli Hauer (ohauer) · 1.0.4.1
- rename AL2 to APACHE20 in Mk/bsd.licenses.db.mk - svn move Templates/Licenses/AL2 Templates/Licenses/APACHE20 - add APACHE10 and APACHE11 to Mk/bsd.licenses.db.mk - add entry in UPDATING - bulk change all ports AL2 => APACHE20

- math/openfst/pkg-plist: remove share/licenses/openfst-1.3.4

PR:		ports/184785
Submitted by:	ohauer
Reviewed by:	tabthorpe
Approved by:	portmgr (tabthorpe@)
4fb1cfb1cd
Baptiste Daroussin (bapt) · 1.0.4.1
Add NO_STAGE all over the place in preparation for the staging support (cat: archivers)
b80ec3e204
Baptiste Daroussin (bapt) · 1.0.4.1
Propertly run make with the right ENV and ARGS and define the C++ compiler via MAKE_ARGS, this allows the package to build with clang
208261f48b
Jason Helfman (jgh) · 1.0.4.1
Snappy-java is a Java port of snappy, a fast C++ compresser/decompresser developed by Google.

WWW: https://github.com/xerial/snappy-java

PR:		ports/178560 (based on)
Submitted by:	Radim Kolar <hsn@filez.com>
d3cca4f775