| Release | Version |
|---|---|
| bookworm | 1.8.0-3 |
| trixie | 1.8.0-4 |
| forky | 1.11.2+ds1-3 |
| sid | 1.11.2+ds1-3 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-59949 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JN ... |
| CVE-2025-66566 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | yawkat LZ4 Java provides LZ4 compression for Java. Insufficient cleari ... |
| CVE-2025-12183 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier ... |