diff --git a/CHANGES.txt b/CHANGES.txt
index f2f23bd4fb..6e91a489d6 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 4.0
+ * Update lz4 to 1.4.0 (13741)
  * Optimize Paxos prepare and propose stage for local requests (CASSANDRA-13862)
  * Throttle base partitions during MV repair streaming to prevent OOM (CASSANDRA-13299)
  * Use compaction threshold for STCS in L0 (CASSANDRA-13861)
diff --git a/build.xml b/build.xml
index 63518c56e8..4e7f9b1f97 100644
--- a/build.xml
+++ b/build.xml
@@ -358,7 +358,7 @@
         <scm connection="${scm.connection}" developerConnection="${scm.developerConnection}" url="${scm.url}"/>
         <dependencyManagement>
           <dependency groupId="org.xerial.snappy" artifactId="snappy-java" version="1.1.2.6"/>
-          <dependency groupId="net.jpountz.lz4" artifactId="lz4" version="1.3.0"/>
+          <dependency groupId="org.lz4" artifactId="lz4-java" version="1.4.0"/>
           <dependency groupId="com.ning" artifactId="compress-lzf" version="0.8.4"/>
           <dependency groupId="com.google.guava" artifactId="guava" version="18.0"/>
           <dependency groupId="org.hdrhistogram" artifactId="HdrHistogram" version="2.1.9"/>
@@ -565,7 +565,7 @@
                 version="${version}"/>
         <scm connection="${scm.connection}" developerConnection="${scm.developerConnection}" url="${scm.url}"/>
         <dependency groupId="org.xerial.snappy" artifactId="snappy-java"/>
-        <dependency groupId="net.jpountz.lz4" artifactId="lz4"/>
+        <dependency groupId="org.lz4" artifactId="lz4-java"/>
         <dependency groupId="com.ning" artifactId="compress-lzf"/>
         <dependency groupId="com.google.guava" artifactId="guava"/>
         <dependency groupId="commons-cli" artifactId="commons-cli"/>
diff --git a/lib/lz4-1.3.0.jar b/lib/lz4-1.3.0.jar
deleted file mode 100644
index 0fb0109804..0000000000
Binary files a/lib/lz4-1.3.0.jar and /dev/null differ
diff --git a/lib/lz4-java-1.4.0.jar b/lib/lz4-java-1.4.0.jar
new file mode 100644
index 0000000000..301908be2c
Binary files /dev/null and b/lib/lz4-java-1.4.0.jar differ