ARROW-6984: [C++] Update LZ4 to 1.9.2 for CVE-2019-17543

Closes apache#5728 from kszucs/ARROW-6984 and squashes the following commits: 093abd7 <Antoine Pitrou> pass -fPIC as make argument 21d3f5b <Krisztián Szűcs> bump lz4 version Lead-authored-by: Antoine Pitrou <[email protected]> Co-authored-by: Krisztián Szűcs <[email protected]> Signed-off-by: Antoine Pitrou <[email protected]>
kszucs · Nov 6, 2019 · 7f08715 · 7f08715
1 parent adb2c73
commit 7f08715
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/cpp/build-support/build-lz4-lib.sh b/cpp/build-support/build-lz4-lib.sh
@@ -19,7 +19,7 @@
 #
 export CFLAGS="${CFLAGS} -O3 -fPIC"
 if [ -z "$MAKELEVEL" ]; then
-  make -j4 "$@"
+  make -j4 CFLAGS="$CFLAGS" "$@"
 else
-  make "$@"
+  make CFLAGS="$CFLAGS" "$@"
 fi
diff --git a/cpp/thirdparty/versions.txt b/cpp/thirdparty/versions.txt
@@ -35,7 +35,7 @@ GLOG_VERSION=v0.3.5
 GRPC_VERSION=v1.24.3
 GTEST_VERSION=1.8.1
 JEMALLOC_VERSION=5.2.1
-LZ4_VERSION=v1.8.3
+LZ4_VERSION=v1.9.2
 # Need post-v1.0.6 version for https://github.com/microsoft/mimalloc/pull/140,
 # https://github.com/microsoft/mimalloc/pull/145 and
 # https://github.com/microsoft/mimalloc/pull/148