[fix][sec] Upgrade snappy-java to address multiple CVEs (#20604)

(cherry picked from commit 62a99ed)

distribution/server/src/assemble/LICENSE.bin.txt

@@ -532,7 +532,7 @@ The Apache Software License, Version 2.0
     - org.apache.zookeeper-zookeeper-jute-3.8.1.jar
     - org.apache.zookeeper-zookeeper-prometheus-metrics-3.8.1.jar
   * Snappy Java
-    - org.xerial.snappy-snappy-java-1.1.8.4.jar
+    - org.xerial.snappy-snappy-java-1.1.10.1.jar
   * Google HTTP Client
     - com.google.http-client-google-http-client-gson-1.41.0.jar
     - com.google.http-client-google-http-client-1.41.0.jar

pom.xml

@@ -121,7 +121,7 @@ flexible messaging model and an intuitive client API.</description>
     <zookeeper.version>3.8.1</zookeeper.version>
     <commons-cli.version>1.5.0</commons-cli.version>
     <commons-text.version>1.10.0</commons-text.version>
-    <snappy.version>1.1.8.4</snappy.version> <!-- ZooKeeper server -->
+    <snappy.version>1.1.10.1</snappy.version> <!-- ZooKeeper server -->
     <dropwizardmetrics.version>4.1.12.1</dropwizardmetrics.version> <!-- ZooKeeper server -->
     <curator.version>5.1.0</curator.version>
     <netty.version>4.1.93.Final</netty.version>

pulsar-sql/presto-distribution/LICENSE

@@ -466,7 +466,7 @@ The Apache Software License, Version 2.0
   * GSON
     - gson-2.8.9.jar
   * Snappy
-    - snappy-java-1.1.8.4.jar
+    - snappy-java-1.1.10.1.jar
   * Jackson
     - jackson-module-parameter-names-2.14.2.jar
   * Java Assist