This is an automated email from the ASF dual-hosted git repository.

davsclaus pushed a commit to branch lz4
in repository https://gitbox.apache.org/repos/asf/camel.git

commit 972f2c964f3c11ec4e9c25e381536b158f65b60e
Author: Claus Ibsen <[email protected]>
AuthorDate: Wed Dec 17 10:01:04 2025 +0100

    CAMEL-22788: camel-kafka - Use new lz4 that is maintained and does not have 
CVE
---
 components/camel-kafka/pom.xml | 11 +++++++++++
 parent/pom.xml                 |  1 +
 2 files changed, 12 insertions(+)

diff --git a/components/camel-kafka/pom.xml b/components/camel-kafka/pom.xml
index d418fc561aa6..549ff14d2a03 100644
--- a/components/camel-kafka/pom.xml
+++ b/components/camel-kafka/pom.xml
@@ -48,6 +48,17 @@
             <groupId>org.apache.kafka</groupId>
             <artifactId>kafka-clients</artifactId>
             <version>${kafka-version}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.lz4</groupId>
+                    <artifactId>lz4-java</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>at.yawk.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+            <version>${lz4-java-version}</version>
         </dependency>
 
         <dependency>
diff --git a/parent/pom.xml b/parent/pom.xml
index 2d47528f0c86..92a7a2826852 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -364,6 +364,7 @@
         <lucene-version>9.12.0</lucene-version>
         <lightcouch-version>0.2.0</lightcouch-version>
         <littleproxy-version>2.4.7</littleproxy-version>
+        <lz4-java-version>1.10.2</lz4-java-version>
         <mapstruct-version>1.6.3</mapstruct-version>
         <!-- needed from tooling/archetypes -->
         <maven-version>3.9.12</maven-version>

Reply via email to