Information on source package lz4

Available versions

ReleaseVersion
stretch0.0~r131-2
stretch (security)0.0~r131-2+deb9u1
buster1.8.3-1
bullseye1.9.3-1
sid1.9.3-2

Open issues

BugstretchbusterbullseyesidDescription
CVE-2021-3520fixedvulnerablevulnerablefixedmemory corruption due to an integer overflow bug caused by memmove argument
CVE-2019-17543vulnerable (no DSA, ignored)vulnerable (no DSA, ignored)fixedfixedLZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (rela ...

Resolved issues

BugDescription
CVE-2014-4715Yann Collet LZ4 before r119, when used on certain 32-bit platforms tha ...
CVE-2014-4611Integer overflow in the LZ4 algorithm implementation, as used in Yann ...

Security announcements

DSA / DLADescription
DLA-2657-1lz4 - security update

Search for package or bug name: Reporting problems