From a44b903fe491c97bcf59528ccc0537cfe412a967 Mon Sep 17 00:00:00 2001
From: rmacmaster <rmacmaster@bloomberg.net>
Date: Mon, 26 Oct 2026 23:53:45 +0000
Subject: [PATCH] HBASE-30496 Bump brotli4j to 1.24.0 to fix CVE-2026-111497

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 7da941f63176..8843a58e6c19 100644
--- a/pom.xml
+++ b/pom.xml
@@ -975,7 +975,7 @@
     <nexus-staging.version>1.7.0</nexus-staging.version>
     <!-- compression -->
     <aircompressor.version>2.0.3</aircompressor.version>
-    <brotli4j.version>1.11.0</brotli4j.version>
+    <brotli4j.version>1.24.0</brotli4j.version>
     <lz4.version>1.11.4</lz4.version>
     <snappy.version>1.1.10.4</snappy.version>
     <zstd-jni.version>1.5.7-20</zstd-jni.version>