＋1 获取 Outlook for iOS<https://aka.ms/o0ukef> ________________________________ 发件人: Christofer Dutz <[email protected]> 发送时间: Wednesday, December 3, 2025 9:53:33 PM 收件人: [email protected] <[email protected]> 主题: AW: Switch to at.yawk.lz4:lz4-java?
+1 Chris Von: Tian Jiang <[email protected]> Datum: Mittwoch, 3. Dezember 2025 um 08:52 An: [email protected] <[email protected]> Betreff: Re: Switch to at.yawk.lz4:lz4-java? +1 Under certain circumstances, the compression algorithm may block GC due to extensive JNI calls. Switching to a maintaining repo makes it hopeful to optimize its performance. Tian Jiang ---- Replied Message ---- | From | Yuan Tian<[email protected]> | | Date | 12/3/2025 14:00 | | To | <[email protected]> | | Subject | Re: Switch to at.yawk.lz4:lz4-java? | I think it's ok, +1 for replacing. On Wed, Dec 3, 2025 at 10:06 AM Haonan Hou <[email protected]> wrote: Hi, The org.lz4:lz4-java is no longer maintained[1] and there is a high risk issue CVE-2025-12183. A community fork[2] is available to fix these issues. I think we should switch to the new one. [1] https://github.com/lz4/lz4/issues/1346 [2] https://github.com/yawkat/lz4-java Best regarts, Haonan
