Summary
[1.8.3-3]
- Fix memory corruption due to an integer overflow
_ Resolves: CVE-2021-3520
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | lz4 | 0:1.8.3-3.el8_4 |
| Oracle Linux · 8 | lz4-devel | 0:1.8.3-3.el8_4 |
| Oracle Linux · 8 | lz4-libs | 0:1.8.3-3.el8_4 |
Vulnerabilities 1
-
Unscored —
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger …