Red Hat Security AdvisoryRHSA-2014:0861
lzo security update
Released 2014-07-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) lzo-2.06-6.el7_0.2, lzo-minilzo-2.06-6.el7_0.2
- Red Hat Enterprise Linux Client Optional (v. 7) lzo-devel-2.06-6.el7_0.2
- Red Hat Enterprise Linux ComputeNode (v. 7) lzo-2.06-6.el7_0.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) lzo-devel-2.06-6.el7_0.2, lzo-minilzo-2.06-6.el7_0.2
- Red Hat Enterprise Linux Desktop (v. 6) lzo-2.03-3.1.el6_5.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) lzo-2.03-3.1.el6_5.1, lzo-devel-2.03-3.1.el6_5.1, lzo-minilzo-2.03-3.1.el6_5.1
- Red Hat Enterprise Linux HPC Node (v. 6) lzo-2.03-3.1.el6_5.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) lzo-2.03-3.1.el6_5.1, lzo-devel-2.03-3.1.el6_5.1, lzo-minilzo-2.03-3.1.el6_5.1
- Red Hat Enterprise Linux Server (v. 6) lzo-2.03-3.1.el6_5.1
- Red Hat Enterprise Linux Server (v. 7) lzo-2.06-6.el7_0.2, lzo-2.06-6.el7_0.2.ppc, lzo-minilzo-2.06-6.el7_0.2
- Red Hat Enterprise Linux Server Optional (v. 6) lzo-2.03-3.1.el6_5.1, lzo-2.03-3.1.el6_5.1.ppc, lzo-devel-2.03-3.1.el6_5.1 +3
- Red Hat Enterprise Linux Server Optional (v. 7) lzo-devel-2.06-6.el7_0.2, lzo-devel-2.06-6.el7_0.2.ppc, lzo-minilzo-2.06-6.el7_0.2 +1
- Red Hat Enterprise Linux Workstation (v. 6) lzo-2.03-3.1.el6_5.1
- Red Hat Enterprise Linux Workstation (v. 7) lzo-2.06-6.el7_0.2, lzo-minilzo-2.06-6.el7_0.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) lzo-2.03-3.1.el6_5.1, lzo-devel-2.03-3.1.el6_5.1, lzo-minilzo-2.03-3.1.el6_5.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) lzo-devel-2.06-6.el7_0.2
Fixes 1 record
Priority MEDIUM 46
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.05315 · Published 2020-02-12 · Partial fix CWE-190
