Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:2399-1

Опубликовано: 28 окт. 2019
Источник: suse-cvrf

Описание

Security update for lz4

This update for lz4 fixes the following issues:

  • CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
liblz4-1-1.8.0-lp151.3.3.1
liblz4-1-32bit-1.8.0-lp151.3.3.1
liblz4-devel-1.8.0-lp151.3.3.1
lz4-1.8.0-lp151.3.3.1

Ссылки

Описание

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."

Затронутые продукты
openSUSE Leap 15.1:liblz4-1-1.8.0-lp151.3.3.1
openSUSE Leap 15.1:liblz4-1-32bit-1.8.0-lp151.3.3.1
openSUSE Leap 15.1:liblz4-devel-1.8.0-lp151.3.3.1
openSUSE Leap 15.1:lz4-1.8.0-lp151.3.3.1
Ссылки
Уязвимость openSUSE-SU-2019:2399-1