Skip to content

LZ4-java: use fork instead of archived project. #5797

@barthanssens

Description

@barthanssens

The LZ4-Java library, which is used by LMDB MapDBv3, is an archived project now.
But there is a public fork available at yawkat/lz4-java

Upgrading to 1.10.1 is recommended due to CVE-2025-12183 and CVE-2025-66566 (might require a license check)

Metadata

Metadata

Assignees

Labels

dependenciesPull requests that update a dependency filesecurity

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions