PR submitted https://github.com/apache/iotdb/pull/16871 PTAL
Haonan On 2025/12/03 22:37:07 冯 庆新 wrote: > ＋1 > > 获取 Outlook for iOS<https://aka.ms/o0ukef> > ________________________________ > 发件人: Christofer Dutz <[email protected]> > 发送时间: Wednesday, December 3, 2025 9:53:33 PM > 收件人: [email protected] <[email protected]> > 主题: AW: Switch to at.yawk.lz4:lz4-java? > > +1 > > Chris > > Von: Tian Jiang <[email protected]> > Datum: Mittwoch, 3. Dezember 2025 um 08:52 > An: [email protected] <[email protected]> > Betreff: Re: Switch to at.yawk.lz4:lz4-java? > > +1 > > > Under certain circumstances, the compression algorithm may block GC due to > extensive JNI calls. > Switching to a maintaining repo makes it hopeful to optimize its performance. > > > Tian Jiang > > > ---- Replied Message ---- > | From | Yuan Tian<[email protected]> | > | Date | 12/3/2025 14:00 | > | To | <[email protected]> | > | Subject | Re: Switch to at.yawk.lz4:lz4-java? | > I think it's ok, +1 for replacing. > > On Wed, Dec 3, 2025 at 10:06 AM Haonan Hou <[email protected]> wrote: > > Hi, > > The org.lz4:lz4-java is no longer maintained[1] and there is a high risk > issue CVE-2025-12183. > A community fork[2] is available to fix these issues. I think we should > switch to the new one. > > [1] https://github.com/lz4/lz4/issues/1346 > [2] https://github.com/yawkat/lz4-java > > Best regarts, > Haonan > >
