Summary
[2.03-3.1.1]
- Fixed integer overflow in decompressor
Resolves: CVE-2014-4607
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | lzo | 0:2.06-6.el7_0.2 |
| Oracle Linux · 7 | lzo-devel | 0:2.06-6.el7_0.2 |
| Oracle Linux · 7 | lzo-minilzo | 0:2.06-6.el7_0.2 |
Vulnerabilities 1
-
Unscored —
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allo…