Nice to see that, approved already.

Best regards,
--------------------
Yuan Tian

On Fri, Dec 5, 2025 at 12:20 PM Haonan Hou <[email protected]> wrote:

> PR submitted https://github.com/apache/iotdb/pull/16871
> PTAL
>
> Haonan
>
> On 2025/12/03 22:37:07 冯 庆新 wrote:
> > +1
> >
> > 获取 Outlook for iOS<https://aka.ms/o0ukef>
> > ________________________________
> > 发件人: Christofer Dutz <[email protected]>
> > 发送时间: Wednesday, December 3, 2025 9:53:33 PM
> > 收件人: [email protected] <[email protected]>
> > 主题: AW: Switch to at.yawk.lz4:lz4-java?
> >
> > +1
> >
> > Chris
> >
> > Von: Tian Jiang <[email protected]>
> > Datum: Mittwoch, 3. Dezember 2025 um 08:52
> > An: [email protected] <[email protected]>
> > Betreff: Re: Switch to at.yawk.lz4:lz4-java?
> >
> > +1
> >
> >
> > Under certain circumstances, the compression algorithm may block GC due
> to extensive JNI calls.
> > Switching to a maintaining repo makes it hopeful to optimize its
> performance.
> >
> >
> > Tian Jiang
> >
> >
> > ---- Replied Message ----
> > | From | Yuan Tian<[email protected]> |
> > | Date | 12/3/2025 14:00 |
> > | To | <[email protected]> |
> > | Subject | Re: Switch to at.yawk.lz4:lz4-java? |
> > I think it's ok, +1 for replacing.
> >
> > On Wed, Dec 3, 2025 at 10:06 AM Haonan Hou <[email protected]> wrote:
> >
> > Hi,
> >
> >  The org.lz4:lz4-java is no longer maintained[1] and there is a high risk
> >  issue CVE-2025-12183.
> >  A community fork[2] is available to fix these issues. I think we should
> >  switch to the new one.
> >
> >  [1] https://github.com/lz4/lz4/issues/1346
> >  [2] https://github.com/yawkat/lz4-java
> >
> >  Best regarts,
> >  Haonan
> >
> >
>

Reply via email to