[SERVER-84616] Define a version for MurmurHash3 Created: 05/Jan/24  Updated: 22/Jan/24  Resolved: 22/Jan/24

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 7.3.0-rc0

Type: Task Priority: Major - P3
Reporter: Spencer Jackson Assignee: Gavin Peters
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: File smhasher-history-since-branch.diff    
Assigned Teams:
Storage Execution
Backwards Compatibility: Fully Compatible
Sprint: Execution Team 2024-01-22, Execution Team 2024-02-05
Participants:

 Description   

When we vendor third party libraries, we must ensure that they've been sourced from known origins and possess meaningful version identifiers. We use version identifiers to track security vulnerabilities and their mitigations, and libraries without versions cannot be easily audited. As we work toward publishing an SBOM, this information will be made public so that our customers can make informed decisions about supply chain risk.

Library MurmurHash3 doesn’t seem to be vendored from a specific release identified by a version identifier issued by its upstream vendor. Please either identify the release which originated the library and update README.third_party.md, update your library to a named release, or migrate to an alternative.

If you require an exception, please reach out to stacey.kingpoling@mongodb.com.



 Comments   
Comment by Githook User [ 22/Jan/24 ]

Author:

{'name': 'Gavin Peters', 'email': 'gavin.peters@mongodb.com', 'username': 'gavinp'}

Message: SERVER-84616 Provide version information for MurmurHash3 (#18111)

Thanks @themattman , I will file two tickets as followup to this. I also
am grumpy about the markup we're using in that file I edited.

GitOrigin-RevId: e8d3ce410150ed23d86be30f3f9a57677507289d
Branch: master
https://github.com/mongodb/mongo/commit/488ed48add3369a818c198cce2c8cc40d4a1df8b

Generated at Thu Feb 08 06:55:31 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.