(pulsar) 01/04: [fix][sec][branch-4.x] Upgrade lz4-java to 1.11.2 (#26439)

[lh...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

lhotari pushed a commit to branch branch-4.0
in repository https://gitbox.apache.org/repos/asf/pulsar.git

commit a0f9a2ae60631ea50d3d4bcbefb9226413acda40
Author: Lari Hotari <lh...@users.noreply.github.com>
AuthorDate: Mon Aug 31 13:43:52 2026 +0300

    [fix][sec][branch-4.x] Upgrade lz4-java to 1.11.2 (#26439)
---
 distribution/server/src/assemble/LICENSE.bin.txt | 2 +-
 pom.xml                                          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 8aac243fc6da..9a41c349c315 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -383,7 +383,7 @@ The Apache Software License, Version 2.0
     - org.apache.bookkeeper-bookkeeper-slogger-api-4.17.4.jar
     - org.apache.bookkeeper-bookkeeper-slogger-slf4j-4.17.4.jar
     - org.apache.bookkeeper-native-io-4.17.4.jar
-    - at.yawk.lz4-lz4-java-1.11.1.jar
+    - at.yawk.lz4-lz4-java-1.11.2.jar
   * Apache HTTP Client
     - org.apache.httpcomponents-httpclient-4.5.14.jar
     - org.apache.httpcomponents-httpcore-4.4.16.jar
diff --git a/pom.xml b/pom.xml
index 71bdf2472de2..64ea0e811685 100644
--- a/pom.xml
+++ b/pom.xml
@@ -374,7 +374,7 @@ flexible messaging model and an intuitive client API.</description>
     <commons-beanutils.version>1.11.0</commons-beanutils.version>
     <commons-configuration2.version>2.15.1</commons-configuration2.version>
     <mina-core.version>2.1.10</mina-core.version>
-    <lz4java.version>1.11.1</lz4java.version>
+    <lz4java.version>1.11.2</lz4java.version>
   </properties>
 
   <dependencyManagement>