ccudennec-otto commented on PR #21035:
URL: https://github.com/apache/kafka/pull/21035#issuecomment-3615581648
If someone else runs into this coming from Spring Boot / Spring Kafka +
Gradle.
I had to update doing this because Gradle gave me this warning: `Cannot
select module with conflict on capability 'org.lz4:lz4-java:1.8.1' also
provided by ['org.lz4:lz4-java:1.8.1' (compile)]`
```
implementation 'org.lz4:lz4-java:1.8.1' // Fixes CVE-2025-12183
modules {
module("org.lz4:lz4-java") {
replacedBy("at.yawk.lz4:lz4-java", "Fork of the original
unmaintained lz4-java library that fixes a CVE")
}
}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
