added new patch file

Author: razvan

druid/stackable/patches/30.0.0/10-cve-2023-34455-rm-snappy.patch

@@ -0,0 +1,37 @@
+Fix CVE-2023-34455
+see https://github.com/stackabletech/vulnerabilities/issues/558
+
+At the end of build process, Druid downloads dependencies directly from a remote
+Maven repository ignoring existing patches that have been applyed locally.
+These dependencies include all transitive dependencies too.
+The hadoop client depends on a vulnerable version of the snappy library which
+is then also downloaded even though a newer version is already on the system.
+
+This patch removes the vulnerable jars.
+
+diff --git a/distribution/pom.xml b/distribution/pom.xml
+index d5918710ef..bba99d078c 100644
+--- a/distribution/pom.xml
++++ b/distribution/pom.xml
+@@ -594,6 +594,21 @@
+                                     </arguments>
+                                 </configuration>
+                             </execution>
++                            </execution>
+++                            <execution>
+++                                <id>fix-cve-2023-34455-remove-snappy</id>
+++                                <phase>package</phase>
+++                                <goals>
+++                                    <goal>exec</goal>
+++                                </goals>
+++                                <configuration>
+++                                    <executable>rm</executable>
+++                                    <arguments>
+++                                      <argument>${project.build.directory}/hadoop-dependencies/hadoop-client-api/3.3.6/snappy-java-1.1.8.2.jar</argument>
+++                                      <argument>${project.build.directory}/hadoop-dependencies/hadoop-client-runtime/3.3.6/snappy-java-1.1.8.2.jar</argument>
+++                                    </arguments>
+++                                </configuration>
+++                            </execution>
+                         </executions>
+                     </plugin>
+                     <plugin>