+1 Chris
Von: Tian Jiang <[email protected]> Datum: Mittwoch, 3. Dezember 2025 um 08:52 An: [email protected] <[email protected]> Betreff: Re: Switch to at.yawk.lz4:lz4-java? +1 Under certain circumstances, the compression algorithm may block GC due to extensive JNI calls. Switching to a maintaining repo makes it hopeful to optimize its performance. Tian Jiang ---- Replied Message ---- | From | Yuan Tian<[email protected]> | | Date | 12/3/2025 14:00 | | To | <[email protected]> | | Subject | Re: Switch to at.yawk.lz4:lz4-java? | I think it's ok, +1 for replacing. On Wed, Dec 3, 2025 at 10:06 AM Haonan Hou <[email protected]> wrote: Hi, The org.lz4:lz4-java is no longer maintained[1] and there is a high risk issue CVE-2025-12183. A community fork[2] is available to fix these issues. I think we should switch to the new one. [1] https://github.com/lz4/lz4/issues/1346 [2] https://github.com/yawkat/lz4-java Best regarts, Haonan
