| Release | Version |
|---|---|
| bullseye | 1.5.1-3 |
| bookworm | 1.8.0-3 |
| trixie | 1.8.0-4 |
| forky | 1.8.0-4 |
| sid | 1.11.2+ds1-1 |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2026-59949 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JN ... |
| CVE-2025-66566 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | fixed | yawkat LZ4 Java provides LZ4 compression for Java. Insufficient cleari ... |
| CVE-2025-12183 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | fixed | Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier ... |