Summary
The lz4 packages provide support for LZ4, a very fast, lossless compression algorithm that provides compression speeds of 400 MB/s per core and scales with multicore CPUs. It also features an extremely fast decoder that reaches speeds of multiple GB/s per core and typically reaches RAM speed limits on multicore systems.
Security Fix(es):
* lz4: heap-based buffer overflow in LZ4_write32 (CVE-2019-17543)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | lz4 | 1.8.3-5.el8_10 |
| AlmaLinux · 8 | lz4-devel | 1.8.3-5.el8_10 |
| AlmaLinux · 8 | lz4-libs | 1.8.3-5.el8_10 |
Vulnerabilities 1
-
Unscored —CVE-2019-17543 EPSS 10%
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applicat…