RFR: 8481: Update lz4-java to 1.10.1 [v3]
Alex Macdonald
aptmac at openjdk.org
Tue Dec 16 15:27:30 UTC 2025
On Fri, 12 Dec 2025 19:58:46 GMT, Alex Macdonald <aptmac at openjdk.org> wrote:
>> There's currently a security advisory open for the version of lz4-java we are using. lz4-java had been archived, but has been updated by a new maintainer with a fix for the security issue.
>>
>> See: https://github.com/yawkat/lz4-java/security/advisories/GHSA-cmp6-m4wj-q63q
>
> Alex Macdonald has refreshed the contents of this pull request, and previous commits have been removed. The incremental views will show differences compared to the previous content of the PR. The pull request contains one new commit since the last revision:
>
> 8481: Update lz4-java to 1.10.1
I contributed a PR to the new lz4-java repo, which should fix the package exports: https://github.com/yawkat/lz4-java/pull/28
Will need to check back here once it's released and verify that it actually works.
-------------
PR Comment: https://git.openjdk.org/jmc/pull/694#issuecomment-3661113992
More information about the jmc-dev
mailing list