archivers/snappy-java: Fix building with CMake 4 Approved by: portmgr (fixit blanket)806576185c
Port details
archivers/snappy-java 1.1.10.8_2
Fast compressor/decompressor library
- Maintainer
- language.devel@gmail.com
- Packages
- latest: 1.1.10.8_2
- Upstream
- up to date
- Last update
- to 1.1.10.8_2 · 806576185c
- Quarterly
- 2026Q4: 1.1.10.8_2
- WWW
- https://github.com/xerial/snappy-java
- Links
- cgit · VuXML
Unaddressed (3)
The CVE record lists the packaged version 1.1.10.8_2 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-93452 | 8.7 | 2026-09-17 | snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Atta… |
| CVE-2026-90559 | 8.7 | 2026-09-12 | snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never vali… |
| CVE-2026-93451 | 6.9 | 2026-09-17 | snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allocate output arrays by dividing uncompressed lengt… |
VuXML only (0)
Listed in VuXML, the packaged version 1.1.10.8_2 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (46)
*/*: bump portrevision after java_default=25 update Included all ports that have USES=java. PR: 29355986813e9ccf
*/*: bump portrevision after java_default=21 update PR: 2728552baaf16375
archivers/snappy-java: Remove duplicate in distinfo A bug in Makefile caused duplicate entries in distinfo after make makesum. While here remove GH_TAGNAME - it have default value. PR: 288452 Approved by: Angelo Polo <language.devel@gmail.com> (maintainer, implicit) Fixes: 88dd12d5f35c (Update 1.1.10.5 => 1.1.10.8) Fixes: ec69541aaaba (Update to 1.1.10.5)8ff7a79fa6
archivers/snappy-java: Update 1.1.10.5 => 1.1.10.8 Changelogs: https://github.com/xerial/snappy-java/releases/tag/v1.1.10.6 https://github.com/xerial/snappy-java/releases/tag/v1.1.10.7 https://github.com/xerial/snappy-java/releases/tag/v1.1.10.8 Improve port: - Switch from gz to xz in deps: reduce size in 1.6 times (235 => 144MiB) - Move cmake from BUILD_DEPENDS to USES. - Switch from hashes to tags in GH_TUPLE. - Split long line. - Replace PORTVERSION with DISTVERSION. - Refresh patches. - Refresh and remove upstreamed patches. PR: 288452 Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>88dd12d5f3
archivers/snappy-java: fix build on powerpc Add necessary plumbing and avoid resource exhaustion.93a5b0af88
Mk/**java.mk: Convert bsd.java.mk to USES The following features have been added or changed: - Instead of USE_JAVA use USES=java. This defaults to USES=java:build,run if NO_BUILD is undefined. Else it defaults to USES=java:run - Instead of USE_ANT=yes use USES=java:ant which also implies USES=java:build - Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or extract - Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply build or run - Instead of JAVA_RUN=yes use USES=java:run does not imply extract or build - Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version> Approved by: mat (portmgr), glewis Differential Revision: https://reviews.freebsd.org/D482010835676e36
archivers/snappy-java: force disable NEON on armv7
Cross compilation might pick up NEON from the host aarch64 system
in our package build cluster.
This gave an error:
In file included from target/snappy-1.1.10/snappy.cc:29:
target/snappy-1.1.10/snappy-internal.h:107:10: error: use of undeclared identifier 'vqtbl1q_u8'; did you mean 'vtbl1_u8'?
107 | return vqtbl1q_u8(input, shuffle_mask);
| ^~~~~~~~~~
| vtbl1_u8
PR: 282272
Approved by: Angelo Polo (maintainer) (via earlier comment in the PR)806a884dc7archivers/snappy-java: enable armv6 and armv7 PR: 282272 Approved by: Angelo Polo (maintainer)28a93b2755
archivers/snappy-java: support build with OpenJDK 21 In Java 21 compiler removed support for source and target 1.7 (7). PR: 280316 Approved by: Angelo Polo <language.devel@gmail.com> Obtained from: https://github.com/xerial/snappy-java/issues/532e4f0d70750
archivers/snappy-java: remove run_depends on openjdk8 This port is a library used by other Java ports. It does not run itself so does not need a run_depends on openjdk8. Solves: unifi7 currently installing openjdk11 and openjdk8 because of this. Not bumping portrevision as it does not change the functionality of the port. tested: poudriere stage-qa: ok PR: 27490210316ebec7
archivers/snappy-java: Update to 1.1.10.5 PR: 268558 Reported by: wcarson.bugzilla@disillusion.net Co-authored-by: Angelo Polo <language.devel@gmail.com>ec69541aaa
*/*: Update path set in BUILD_DEPENDS for CMake Commit b23ea4e2d2f51b53d8915fe9fd7b4efbdd575e38 changed its location to devel/cmake-core Approved by: portmgr (blanket)e942e560c4
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
archivers: remove 'Created by' lines A big Thank You to the original contributors of these ports: * Aaron Dalton <aaron@FreeBSD.org> * Akinori MUSHA aka knu <knu@idaemons.org> * Albert Vernon <f3cun3c02@sneakemail.com> * Alex Dupre <ale@FreeBSD.org> * Alex Samorukov <samm@freebsd.org> * Alexander Kuehn <freebsd@nagilum.org> * Alexander Logvinov <ports@logvinov.com> * Alexander Zhuravlev <zaa@zaa.pp.ru> * Alexey Dokuchaev <danfe@FreeBSD.org> * Alexey Dokuchaev <danfe@regency.nsu.ru> * Anders Nordby <anders@FreeBSD.org> * Andreas Klemm <andreas@klemm.gtn.com> * Andreev Maxim * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrey Chernov <ache@FreeBSD.org> * Andrey Kostenko <andrey@kostenko.name> * Anes Mukhametov <anes@anes.su> * Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>) * Ayumi M <ayu@commun.jp> * Carsten Larsen <cs@innolan.dk> * Chin-San Huang <chinsan.tw@gmail.com> * Chris D. Faulhaber <jedgar@FreeBSD.org> * Chris Larsen <darth@vader.dk> * Christopher Key <cjk32@cam.ac.uk> * Cyrille Lefevre <cyrille.lefevre@laposte.net> * Dmitry Sivachenko <demon@FreeBSD.org> * Emanuel Haupt <ehaupt@FreeBSD.org> * Emanuel Haupt <ehaupt@critical.ch> * Felix Palmen <felix@palmen-it.de> * Gabor Kovesdan <gabor@FreeBSD.org> * Gea-Suan Lin (gslin@ccca.nctu.edu.tw) * Gea-Suan Lin <gslin@gslin.org> * George Reid <greid@ukug.uk.freebsd.org> * Greg Lewis <glewis@FreeBSD.org> * Hsin-Han You <hhyou@cs.nctu.edu.tw> * Hye-Shik Chang * Hye-Shik Chang <perky@FreeBSD.org> * Igor Pokrovsky <tiamat@telegraph.spb.ru> * Jaap Boender <jaapb@kerguelen.org> * Jean-Yves Lefort <jylefort@brutele.be> * Jeff Burchell <toxic@doobie.com> * Jeffrey H. Johnson <CPE1704TKS@bellsouth.net> * Jerry Hicks * Joao Carlos Mendes Luis <jonny@jonny.eng.br> * John Marino <marino@FreeBSD.org> * José García Juanino <jjuanino@gmail.com> * Juergen Lock <nox@jelal.kn-bremen.de> * Kevin Golding <ports@caomhin.org> * Konstantin Reznichenko <kot@premierbank.dp.ua> * Koop Mast <kwm@FreeBSD.org> * Kubilay Kocak <koobs@FreeBSD.org> * Lars Thegler <lth@FreeBSD.org> * Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org> * Mark Felder <feld@FreeBSD.org> * Mark Kane <mark@mkproductions.org> * Mark Pulford <mark@kyne.com.au> * Martin Matuska <mm@FreeBSD.org> * Martin Wilke <miwi@FreeBSD.org> * Matteo Cypriani <mcy@lm7.fr> * Max Khon <fjoe@FreeBSD.org> * Maxim Sobolev <sobomax@FreeBSD.org> * Melvyn Sopacua <melvyn@magemana.nl> * Miguel Mendez <flynn@energyhq.homeip.net> * Nathan Ahlstrom <nra@FreeBSD.org> * Nicola Vitale <nivit@FreeBSD.org> * Patrick Seal <patseal@hyperhost.net> * Pav Lucistnik <pav@FreeBSD.org> * Per Wigren * Philippe Casidy <pcasidy@casidy.com> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Poul-Henning Kamp <phk@FreeBSD.org> * Radim Kolar * Radim Kolar <hsn@filez.com> * Radim Kolar <hsn@netmag.cz> * Rainer Hurling <rhurlin@gwdg.de> * Richard Gallamore <ultima@FreeBSD.org> * Roman Shterenzon <roman@xpert.com> * Ryan Steinmetz <zi@FreeBSD.org> * Sam Lawrance <boris@brooknet.com.au> * Sergey A. Osokin <osa@FreeBSD.org> * Sergey Skvortsov <skv@protey.ru> * Sir l33tname <sirl33tname@gmail.com> * Stanislav Sedov <ssedov@mbsd.msk.ru> * Stefan Esser <se@FreeBSD.org> * Steve Wills <swills@FreeBSD.org> * Steven Kreuzer <skreuzer@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> * Sylvio Cesar <sylvio@FreeBSD.org> * TAKATSU Tomonari <tota@FreeBSD.org> * Thierry Thomas <thierry@pompo.net> * Thomas Abthorpe <thomas@goodking.ca> * Thomas Gellekum <tg@FreeBSD.org> * Vanilla I. Shu <vanilla@FreeBSD.org> * Wen Heping <wenheping@gmail.com> * Will Andrews <andrews@technologist.com> * Yarodin <yarodin@gmail.com> * Ying-Chieh Liao <ijliao@FreeBSD.org> * Yuri Victorovich <yuri@rawbw.com> * ache * adamw * antoine@FreeBSD.org * bf <bf2006a@yahoo.com> * chinsan <chinsan.tw@gmail.com> * giffunip@asme.org * gurkan@phys.ethz.ch * iblis <iblis.dif01@nctu.edu.tw> * ijliao * jmz * kwm@FreeBSD.org * lbartoletti <lbartoletti@FreeBSD.org> * mm * ports@c0decafe.net <ports@c0decafe.net> * samm@freebsd.org * swhetzel@gmail.com * will With hat: portmgr1ced9d288a
archivers/snappy-java: fix build on powerpc64lefd836055d6
archivers/snappy-java: fix build on powerpc647d26f0f538
Remove # $FreeBSD$ from Makefiles.305f148f48
This now builds on powerpc64. Approved by: portmgr (tier-2 blanket)370979cef8
archivers/snappy-java: fix build on aarch64 PR: 247146 Submitted by: Ronald Klop Approved by: Angelo Polo (maintainer)defe12367f
Regular USE_GITHUB cleanup.fd11f3f038
archivers/snappy-java: update 1.0.4.1 -> 1.1.7.5, submitter becomes maintainer - Builds with sbt instead of maven - Java 11 compatible - Testing moved to test target - Builds in poudriere with openjdk8 and openjdk11 - All tests pass - All databases/cassandra4 tests using snappy-java pass PR: 246348 Submitted by: Angelo Polo <language.devel@gmail.com> Relnotes: https://github.com/xerial/snappy-java/blob/master/Milestone.mdf601c9b0e5
Clean up after java/openjdk6 and java/openjdk6-jre removal java/openjdk6 support was removed from Mk/bsd.java.mk (r512662) and java/openjdk6 and java/openjdk6-jre were removed from the ports tree (r512663). Now this patch completely removes remaining stuff from the ports tree. PR: 241953 (exp-run) Reviewed by: glewis Approved by: portmgr (antoine) Differential Revision: https://reviews.freebsd.org/D223425a52a08234
- shift hosting distfile at FreeBSD resources to SFa14d7fe982
Return Mark Dixon's ports to the heap. He put a ton of work into these, so our thanks to him for giving us all that time and effort. Submitted by: Mark Dixon3a194db7cd
Mark as broken on powerpc64. While here, pet portlint. Failed to execute goal org.apache.maven.plugins:maven-surefire-plugin:2.14.1:test (default-test) on project snappy-java: Execution default-test of goal org.apache.maven.plugins:maven-surefire-plugin:2.14.1:test failed: The forked VM terminated without saying properly goodbye. VM crash or System.exit called ? Approved by: portmgr (tier-2 blanket)0cebdd826f
For ports that are marked BROKEN on armv6, and also fail to build on armv7, mark them so. This is part two of a multipart commit to bring armv7 ports to parity with armv6. Approved by: portmgr (tier-2 blanket) Obtained from: lonesome.com -exp runbf43557044
Mark some ports failing on armv6, for errors classified as "???". While here, pet portlint. Approved by: portmgr (tier-2 blanket)c095cd43d0
archivers/snappy-java: new fedora MASTER_SITE to unbreak91b481df9c
GOOGLE_CODE has gone away. - If a port has another upstream, remove GOOGLE_CODE - If a port only has GOOGLE_CODE mark it BROKEN Some ports have a local mirror configured but for security reasons, it is not considered upstream. Sponsored by: Absolightdbbfc7889a
Cleanup patches, a* categories. Rename them to follow the make makepatch naming, and regenerate them. With hat: portmgr Sponsored by: Absolight9fa9eb9ac7
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.
With hat: portmgr
Sponsored by: Absolight7f4572eae4archivers/snappy-java: force correct maven, submitter becomes maintainer PR: 204666 Submitted by: Mark Dixon <mark@tranquillussoftware.co.uk> Approved by: Radum Kolar <hsn@sendmail.cz> (maintainer)d4053317e6
Always set the DEFAULT github DISTFILE with .tar.gz for EXTRACT_SUFX. Fix distinfo for the offending ports. lang/yorick's tag was moved, and the added patch was no longer needed. PR: 207644 Submitted by: mat Exp-run by by: antoine Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D4268018eeadae5
archivers/snappy-java: Allow JAVA_VERSIONS 1.7+ This prevents duplicate java versions from being installed if a port requires a newer jdk and snappy-java. PR: 206240 Approved by: maintainer timeout923667c2a4
Cleanup USE_GITHUB usage. With hat: portmgr Sponsored by: Absolight90a49f0472
Update ports in the a* categories to not use GH_COMMIT. With minor cleanups to make things simpler. With hat: portmgr Sponsored by: Absolight6e83422724
Update USE_GITHUB so it does not require GH_COMMIT. Using this new scheme allows only setting the _tag_ or _commit hash_ in GH_TAGNAME and not having to know the hash for a tag. This scheme will download a tarball that has a different checksum than before due to a changed directory name for extraction. The following MASTER_SITES are provided to retain the old checksum and directory structure (that require GH_COMMIT): GH -> GHL GITHUB -> GITHUB_LEGACY Differential Revision: https://reviews.freebsd.org/D748 Submitted by: amdmi3 Reviewed by: mat, swills, antoine, bdrewery With hat: portmgr5b5a90256d
Replace GMAKE by MAKE_CMDef49fa1572
Simplification and cleanup of the port6a84798a29
- Install native library [1] - Support staging PR: ports/185794 [1] Submitted by: Henry Hu <henry.hu.sh@gmail.com>cc4b462793
- rename AL2 to APACHE20 in Mk/bsd.licenses.db.mk - svn move Templates/Licenses/AL2 Templates/Licenses/APACHE20 - add APACHE10 and APACHE11 to Mk/bsd.licenses.db.mk - add entry in UPDATING - bulk change all ports AL2 => APACHE20 - math/openfst/pkg-plist: remove share/licenses/openfst-1.3.4 PR: ports/184785 Submitted by: ohauer Reviewed by: tabthorpe Approved by: portmgr (tabthorpe@)4fb1cfb1cd
Add NO_STAGE all over the place in preparation for the staging support (cat: archivers)b80ec3e204
Propertly run make with the right ENV and ARGS and define the C++ compiler via MAKE_ARGS, this allows the package to build with clang208261f48b
Snappy-java is a Java port of snappy, a fast C++ compresser/decompresser developed by Google. WWW: https://github.com/xerial/snappy-java PR: ports/178560 (based on) Submitted by: Radim Kolar <hsn@filez.com>d3cca4f775