Alerts This Week
Warning Icon 1 474
Alerts This Week
Warning Icon 1 474

Debian Buster DSA-4919-1 Moderate: lz4 Integer Overflow Threat

debian
Calendar Grey May 21, 2021
Debian Logo
Enhance your zlib installations in accordance with Debian DSA-4938-1 to improve the management of potential buffer overflow vulnerabilities.
Jasper Lievisse Adriaanse reported an integer overflow flaw in lz4, a fast LZ compression algorithm library, resulting in memory corruption
Topics%20covered

Topics Covered

security advisory moderate software update debian memory corruption moderate severity integer overflow lz4

Summary

For the stable distribution (buster), this problem has been fixed in
version 1.8.3-1+deb10u1.

We recommend that you upgrade your lz4 packages.

For the detailed security status of lz4 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/lz4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: lz4
CVE ID: CVE-2021-3520

Topics%20covered

Topics Covered

security advisory moderate software update debian memory corruption moderate severity integer overflow lz4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here