diff --git a/README.md b/README.md index 7f6b8ecb..e2948117 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # LZ4 Java -*Community-maintained fork of https://github.com/lz4/lz4-java to patch CVE‐2025‐12183. Maven coordinates:* +*Community-maintained fork of https://github.com/lz4/lz4-java to patch [CVE‐2025‐12183](https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183). Maven coordinates:* ```xml @@ -141,15 +141,16 @@ int hash = hash32.getValue(); # Download -You can download released artifacts from [Maven Central](https://search.maven.org/search?q=g:org.lz4%20a:lz4-java). +You can download released artifacts from [Maven Central](https://central.sonatype.com/artifact/at.yawk.lz4/lz4-java). -You can download pure-Java lz4-java from [Maven Central](https://search.maven.org/search?q=g:org.lz4%20a:lz4-pure-java). These artifacts include the Safe and Unsafe Java versions but not JNI bindings. (Experimental) +Prior to 1.8.1, there was also a lz4-pure-java artifact that excluded the JNI binary. This artifact has been discontinued because it is difficult to build and doesn't make a lot of sense from a design standpoint. The latest version of this artifact is still vulnerable to CVE‐2025‐12183. Please open an issue if you have a use case that requires this version. # Documentation - - [lz4](https://lz4.github.io/lz4-java/1.8.0/docs/net/jpountz/lz4/package-summary.html) - - [xxhash](https://lz4.github.io/lz4-java/1.8.0/docs/net/jpountz/xxhash/package-summary.html) - - [changelog](https://github.com/lz4/lz4-java/blob/master/CHANGES.md) + - [lz4](https://javadoc.io/doc/at.yawk.lz4/lz4-java/latest/org.lz4.java/net/jpountz/lz4/package-summary.html) + - [xxhash](https://javadoc.io/doc/at.yawk.lz4/lz4-java/latest/org.lz4.java/net/jpountz/xxhash/package-summary.html) + - [changelog (versions <= 1.8.0)](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md) + - [changelog / GitHub releases (versions >= 1.8.1)](https://github.com/yawkat/lz4-java/releases) # Performance diff --git a/pom.xml b/pom.xml index a5c67087..7581e5f8 100644 --- a/pom.xml +++ b/pom.xml @@ -26,7 +26,7 @@ LZ4 Java Compression Java bindings and pure Java implementations of LZ4 and XXHash - https://github.com/lz4/lz4-java + https://github.com/yawkat/lz4-java Apache License, Version 2.0