RFR: 8481: Update lz4-java to 1.10.2 [v7]

Johannes Bechberger jbechberger at openjdk.org
Thu Jan 22 08:37:53 UTC 2026


On Fri, 9 Jan 2026 15:17:26 GMT, Alex Macdonald <aptmac at openjdk.org> wrote:

>> There's currently a security advisory open for the version of lz4-java we are using. lz4-java had been archived, but has been updated by a new maintainer with a fix for the security issue.
>> 
>> See: https://github.com/yawkat/lz4-java/security/advisories/GHSA-cmp6-m4wj-q63q
>
> Alex Macdonald has updated the pull request incrementally with one additional commit since the last revision:
> 
>   update missed license headers

Could we merge this soon?

-------------

PR Comment: https://git.openjdk.org/jmc/pull/694#issuecomment-3783180820


More information about the jmc-dev mailing list