From 356eeb90844d898ca37c04247a4bb09f6b97db90 Mon Sep 17 00:00:00 2001
From: Schmidtmer <o.schmidtmer@elo.com>
Date: Mon, 8 Dec 2025 14:09:20 +0100
Subject: [PATCH] Update Lz4J

CVE-2025-66566, CVE-2025-12183
---
 visualvm/jfr.generic/external/binaries-list              | 2 +-
 visualvm/jfr.generic/external/lz4-java-1.8.0-license.txt | 4 ++--
 visualvm/jfr.generic/nbproject/project.properties        | 2 +-
 visualvm/jfr.generic/nbproject/project.xml               | 4 ++--
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/visualvm/jfr.generic/external/binaries-list b/visualvm/jfr.generic/external/binaries-list
index 84cf82ca9e..97a3eef49f 100644
--- a/visualvm/jfr.generic/external/binaries-list
+++ b/visualvm/jfr.generic/external/binaries-list
@@ -1,4 +1,4 @@
 0F89E45C26154C5EA910633F79A4503E6DA495AC org.openjdk.jmc:flightrecorder:8.3.1
 7DE2918886C01F3273DB610093F36257425D5DF2 org.openjdk.jmc:common:8.3.1
-4B986A99445E49EA5FBF5D149C4B63F6ED6C6780 org.lz4:lz4-java:1.8.0
+F541D7F910FE3D76F38F799C507C48CC81B12ECB at.yawk.lz4:lz4-java:1.10.1
 35AE93BE1524B161525DA2C9A110019616F67548 org.owasp.encoder:encoder:1.2.3
diff --git a/visualvm/jfr.generic/external/lz4-java-1.8.0-license.txt b/visualvm/jfr.generic/external/lz4-java-1.8.0-license.txt
index fa1aed610d..2ace5b6dfa 100644
--- a/visualvm/jfr.generic/external/lz4-java-1.8.0-license.txt
+++ b/visualvm/jfr.generic/external/lz4-java-1.8.0-license.txt
@@ -1,7 +1,7 @@
 Name: lz4-java
 Description: Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm
-Version: 1.8.0
-Origin: https://github.com/lz4/lz4-java
+Version: 1.10.1
+Origin: https://github.com/yawkat/lz4-java
 License: Apache-2.0
 
 
diff --git a/visualvm/jfr.generic/nbproject/project.properties b/visualvm/jfr.generic/nbproject/project.properties
index 52a26ecea6..c689777b1b 100644
--- a/visualvm/jfr.generic/nbproject/project.properties
+++ b/visualvm/jfr.generic/nbproject/project.properties
@@ -12,5 +12,5 @@ file.reference.lz4-java-1.8.0.jar=external/lz4-java-1.8.0.jar
 file.reference.encoder-1.2.3.jar=external/encoder-1.2.3.jar
 release.external/flightrecorder-8.3.1.jar=modules/ext/flightrecorder-8.3.1.jar
 release.external/common-8.3.1.jar=modules/ext/common-8.3.1.jar
-release.external/lz4-java-1.8.0.jar=modules/ext/lz4-java-1.8.0.jar
+release.external/lz4-java-1.10.1.jar=modules/ext/lz4-java-1.10.1.jar
 release.external/encoder-1.2.3.jar=modules/ext/encoder-1.2.3.jar
diff --git a/visualvm/jfr.generic/nbproject/project.xml b/visualvm/jfr.generic/nbproject/project.xml
index dff7c07de4..76ebb8fd2d 100644
--- a/visualvm/jfr.generic/nbproject/project.xml
+++ b/visualvm/jfr.generic/nbproject/project.xml
@@ -51,8 +51,8 @@
                 <binary-origin>external/flightrecorder-8.3.1.jar</binary-origin>
             </class-path-extension>
             <class-path-extension>
-                <runtime-relative-path>ext/lz4-java-1.8.0.jar</runtime-relative-path>
-                <binary-origin>external/lz4-java-1.8.0.jar</binary-origin>
+                <runtime-relative-path>ext/lz4-java-1.10.1.jar</runtime-relative-path>
+                <binary-origin>external/lz4-java-1.10.1.jar</binary-origin>
             </class-path-extension>
             <class-path-extension>
                 <runtime-relative-path>ext/encoder-1.2.3.jar</runtime-relative-path>