From a13252103df3753e25d6a3d2a0cde2a8eb813854 Mon Sep 17 00:00:00 2001
From: PJ Fanning <pjfanning@users.noreply.github.com>
Date: Tue, 9 Dec 2025 13:25:45 +0100
Subject: [PATCH] HADOOP-19747. Switch to at.yawk.lz4:lz4-java:1.10.1 due to
 CVE-2025-66566

---
 LICENSE-binary         | 2 +-
 hadoop-project/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index f4640d4fd6b3b..c651817f3619f 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -213,7 +213,7 @@ hadoop-hdfs-project/hadoop-hdfs/src/main/webapps/static/nvd3-1.8.5.* (css and js
 hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/datanode/checker/AbstractFuture.java
 hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/datanode/checker/TimeoutFuture.java
 
-at.yawk.lz4:lz4-java:1.9.0
+at.yawk.lz4:lz4-java:1.10.1
 ch.qos.reload4j:reload4j:1.2.22
 com.aliyun:aliyun-java-core:0.2.11-beta
 com.aliyun:aliyun-java-sdk-core:4.5.10
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index f913e14d2e273..70250d758c928 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -149,7 +149,7 @@
     <metrics.version>3.2.4</metrics.version>
     <netty4.version>4.1.127.Final</netty4.version>
     <snappy-java.version>1.1.10.4</snappy-java.version>
-    <lz4-java.version>1.9.0</lz4-java.version>
+    <lz4-java.version>1.10.1</lz4-java.version>
     <byte-buddy.version>1.17.6</byte-buddy.version>
 
     <!-- Maven protoc compiler -->