Red Hat Security Advisory

RHSA-2025:11035

lz4 security update

Released 2025-07-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) lz4-1.8.3-5.el8_10, lz4-devel-1.8.3-5.el8_10, lz4-libs-1.8.3-5.el8_10

Fixes 1 record

TI-2019-13087 CVE-2019-17543 · GHSA-fxrv-74g3-w7qr

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to…

MEDIUM 56

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.10451 Published 2019-10-14 Partial fix CWE-787