Summary
[1.8.3-5]
- Fix a renamed variable in one of the patches
- Since the variable was used in an assert, the regular build did not fail, but the QA builds did.
- Related: RHEL-87362
[1.8.3-4]
- Fix CVE-2019-17543
- Resolves: RHEL-87362
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | lz4 | 0:1.8.3-5.el8_10 |
| Oracle Linux · 8 | lz4-devel | 0:1.8.3-5.el8_10 |
| Oracle Linux · 8 | lz4-libs | 0:1.8.3-5.el8_10 |
Vulnerabilities 1
-
Unscored —CVE-2019-17543 EPSS 10%
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applicat…