You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by sl...@apache.org on 2026/08/15 01:58:03 UTC

(hadoop) branch trunk updated: HADOOP-19956. Upgrade lz4-java to 1.11.2 due to security issues (#8666) Contributed by PJ Fanning

This is an automated email from the ASF dual-hosted git repository.

slfan1989 pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop.git


The following commit(s) were added to refs/heads/trunk by this push:
     new d76ea36efb9 HADOOP-19956. Upgrade lz4-java to 1.11.2 due to security issues (#8666) Contributed by PJ Fanning
d76ea36efb9 is described below

commit d76ea36efb930e415486a692f08fb6562eaa6546
Author: PJ Fanning <pj...@users.noreply.github.com>
AuthorDate: Sat Aug 15 02:57:57 2026 +0100

    HADOOP-19956. Upgrade lz4-java to 1.11.2 due to security issues (#8666) Contributed by PJ Fanning
    
    * HADOOP-19956. Upgrade lz4-java to 1.11.2 due to security issues
    Reviewed-by: Ayush Saxena <ay...@apache.org>
    Signed-off-by: Shilun Fan <sl...@apache.org>
---
 LICENSE-binary         | 2 +-
 hadoop-project/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index b8f479e0c4f..a140725cc69 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -211,7 +211,7 @@ to be inclusive of all which may be included:
 
 hadoop-hdfs-project/hadoop-hdfs/src/main/webapps/static/nvd3-1.8.5.* (css and js files)
 
-at.yawk.lz4:lz4-java:1.11.1
+at.yawk.lz4:lz4-java:1.11.2
 ch.qos.reload4j:reload4j:1.2.22
 com.aliyun:aliyun-java-core:0.2.11-beta
 com.aliyun:aliyun-java-sdk-core:4.5.10
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 1338c7d4bd9..b809cdb8248 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -154,7 +154,7 @@
     <metrics.version>3.2.4</metrics.version>
     <netty4.version>4.1.137.Final</netty4.version>
     <snappy-java.version>1.1.10.4</snappy-java.version>
-    <lz4-java.version>1.11.1</lz4-java.version>
+    <lz4-java.version>1.11.2</lz4-java.version>
     <zstd-jni.version>1.5.7-8</zstd-jni.version>
     <byte-buddy.version>1.17.6</byte-buddy.version>
 


---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org