Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
83ef14ca by Bastien Roucariès at 2026-10-08T16:09:56+02:00
lz4-java/bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1223,22 +1223,27 @@ CVE-2026-106454 (Twisted is an event-based framework
for internet applications,
NOTE: Fixed by:
https://github.com/twisted/twisted/commit/2f8a3c29246f4eb324690e06a9767a11dc4aec9f
CVE-2026-106453 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to
1.11.2, LZ ...)
- lz4-java 1.11.2+ds1-1
+ [bookworm] - lz4-java <postponed> (minor issue)
NOTE:
https://github.com/yawkat/lz4-java/security/advisories/GHSA-6cx8-rjf8-pr8g
NOTE: Fixed by:
https://github.com/yawkat/lz4-java/commit/6492ce5aca6bd03ff9e08ee18a2beb94c431371a
(v1.11.2)
CVE-2026-106452 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to
1.11.2, ne ...)
- lz4-java 1.11.2+ds1-1
+ [bookworm] - lz4-java <postponed> (minor issue; DoS)
NOTE:
https://github.com/yawkat/lz4-java/security/advisories/GHSA-4v53-57pg-c464
NOTE: Fixed by:
https://github.com/yawkat/lz4-java/commit/bb83dd16163cdb71231af06b0a5651881148a634
(v1.11.2)
CVE-2026-106451 (yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0
until 1. ...)
- lz4-java <unfixed> (bug #1150247)
+ [bookworm] - lz4-java <postponed> (minor issue)
NOTE:
https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g
NOTE: Fixed by:
https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3
(v1.11.4)
CVE-2026-106450 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to
1.11.4, ne ...)
- lz4-java <unfixed> (bug #1150247)
+ [bookworm] - lz4-java <postponed> (minor issue; DoS)
NOTE:
https://github.com/yawkat/lz4-java/security/advisories/GHSA-gm45-99xc-r7wv
NOTE: Fixed by:
https://github.com/yawkat/lz4-java/commit/2acc0ec1ead226145c62a817c18c8ed49233a283
(v1.11.4)
CVE-2026-106449 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to
1.11.4, ne ...)
- lz4-java <unfixed> (bug #1150247)
+ [bookworm] - lz4-java <postponed> (minor issue)
NOTE:
https://github.com/yawkat/lz4-java/security/advisories/GHSA-343h-94h5-c4wr
NOTE: Fixed by:
https://github.com/yawkat/lz4-java/commit/c8ebf97d504fb34434fda46fc761e8202570e0d8
(v1.11.4)
CVE-2026-106448 (StableLib is a stable library of useful TypeScript and
JavaScript code ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ef14ca25848803a9d42b0368715c142a12f6a7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ef14ca25848803a9d42b0368715c142a12f6a7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
