You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by ch...@apache.org on 2026/08/03 07:56:27 UTC
(hadoop) branch trunk updated: HADOOP-19949. Upgrade lz4-java to 1.11.1 due to CVE-2026-59949 (#8643)
This is an automated email from the ASF dual-hosted git repository.
pan3793 pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/trunk by this push:
new cd988431dcb HADOOP-19949. Upgrade lz4-java to 1.11.1 due to CVE-2026-59949 (#8643)
cd988431dcb is described below
commit cd988431dcb54985ecf15c2c55e450a58bfe37e1
Author: PJ Fanning <pj...@users.noreply.github.com>
AuthorDate: Mon Aug 3 08:56:20 2026 +0100
HADOOP-19949. Upgrade lz4-java to 1.11.1 due to CVE-2026-59949 (#8643)
Authored-by: PJ Fanning <fa...@apache.org>
Reviewed-by: Shilun Fan <sl...@apache.org>
Signed-off-by: Cheng Pan <ch...@apache.org>
---
LICENSE-binary | 2 +-
hadoop-project/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index 84f2bdafaa2..70f55e88f54 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -211,7 +211,7 @@ to be inclusive of all which may be included:
hadoop-hdfs-project/hadoop-hdfs/src/main/webapps/static/nvd3-1.8.5.* (css and js files)
-at.yawk.lz4:lz4-java:1.10.4
+at.yawk.lz4:lz4-java:1.11.1
ch.qos.reload4j:reload4j:1.2.22
com.aliyun:aliyun-java-core:0.2.11-beta
com.aliyun:aliyun-java-sdk-core:4.5.10
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 6ad3f59be77..06c24ea6846 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -154,7 +154,7 @@
<metrics.version>3.2.4</metrics.version>
<netty4.version>4.1.135.Final</netty4.version>
<snappy-java.version>1.1.10.4</snappy-java.version>
- <lz4-java.version>1.10.4</lz4-java.version>
+ <lz4-java.version>1.11.1</lz4-java.version>
<zstd-jni.version>1.5.7-8</zstd-jni.version>
<byte-buddy.version>1.17.6</byte-buddy.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org