Summary
[8.2.0-4]
- Bump LZ4 Version to 1.10.2. Related: RHEL-135478
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | jmc | 0:8.2.0-18.el9_7.2 |
Vulnerabilities 1
-
High 8.2
yawkat LZ4 Java has a possible information leak in Java safe decompressor
yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In a…