-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 12 May 2021 10:41:05 +0100 Source: lz4 Binary: liblz4-dev liblz4-1 liblz4-1-dbg liblz4-tool Architecture: source amd64 Version: 0.0~r131-2+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Nobuhiro Iwamatsu <iwamatsu@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: liblz4-1 - Fast LZ compression algorithm library - runtime liblz4-1-dbg - Fast LZ compression algorithm library - Debugging Symbols liblz4-dev - Fast LZ compression algorithm library - development files liblz4-tool - Fast LZ compression algorithm library - tool Closes: 987856 Changes: lz4 (0.0~r131-2+deb9u1) stretch-security; urgency=high . * CVE-2021-3520: Fix a potential memory corruption vulnerability that could be exploited with a negative memmove(3) size argument. (Closes: #987856) Checksums-Sha1: f44415159f2931e555103d732af7b119d3881900 2015 lz4_0.0~r131-2+deb9u1.dsc b6eab6461977dca11e7efc4ed79d59924b216c7e 133784 lz4_0.0~r131.orig.tar.gz 1d4c47ddc3183ae2f2c13900d33a5eea74fad272 5316 lz4_0.0~r131-2+deb9u1.debian.tar.xz a41f19b84481f1126d778f0f024fa17a19cc2f1d 174444 liblz4-1-dbg_0.0~r131-2+deb9u1_amd64.deb 866fe0be51e95d36ad574f65787a995c69c6d887 33178 liblz4-1_0.0~r131-2+deb9u1_amd64.deb 55076e75dfde9e09d9df5b4b2a5be0c8c5a4ae57 41200 liblz4-dev_0.0~r131-2+deb9u1_amd64.deb 15b7ce118d13ef656671bf815982e76afb4cd032 52172 liblz4-tool_0.0~r131-2+deb9u1_amd64.deb e0aa6c6466a1435c72f1954b46c97aa60aacc0aa 6694 lz4_0.0~r131-2+deb9u1_amd64.buildinfo Checksums-Sha256: dd0fe6a29303b74f3269c0c41bbc18df745f039c57c589e9fb7b1b22b6a694bc 2015 lz4_0.0~r131-2+deb9u1.dsc 9d4d00614d6b9dec3114b33d1224b6262b99ace24434c53487a0c8fd0b18cfed 133784 lz4_0.0~r131.orig.tar.gz cd17d69b2aacc8c7ace3364b8ad1f0e36f7238e9486a60f49f75d8b66e87c006 5316 lz4_0.0~r131-2+deb9u1.debian.tar.xz 5126c8974e0255665c4661dcb7cb1c0f223f74b0ca6694650d4031801a56dd31 174444 liblz4-1-dbg_0.0~r131-2+deb9u1_amd64.deb c2084a480773ccf910e78af9e367fb7a8f9f3843c5cea881a20699905620df96 33178 liblz4-1_0.0~r131-2+deb9u1_amd64.deb 5ecea212089c2f75eab9c54dc2b5937e80d4963d5707a967b8143d53ee777a06 41200 liblz4-dev_0.0~r131-2+deb9u1_amd64.deb 1e0e415a13d77f1224e55098e9abe9617ec14b69ed60fadfab72337a93593826 52172 liblz4-tool_0.0~r131-2+deb9u1_amd64.deb f610ce4c93708fc11e9093645d5560bde8484f05d765b164014e26ef8c28eb7c 6694 lz4_0.0~r131-2+deb9u1_amd64.buildinfo Files: 2b6f38f78b9accf46e832025f2793703 2015 utils extra lz4_0.0~r131-2+deb9u1.dsc 42b09fab42331da9d3fb33bd5c560de9 133784 utils extra lz4_0.0~r131.orig.tar.gz 3fe3fd75e78d539e0815d3acaa777369 5316 utils extra lz4_0.0~r131-2+deb9u1.debian.tar.xz ffa653cebf655c3bff8435e0f0e07d26 174444 debug extra liblz4-1-dbg_0.0~r131-2+deb9u1_amd64.deb 5d7da6687e099f5edd19be9e598280ee 33178 libs extra liblz4-1_0.0~r131-2+deb9u1_amd64.deb ac1f704c6bf12d13ef43d3b6792efc0d 41200 libdevel extra liblz4-dev_0.0~r131-2+deb9u1_amd64.deb 721ca4c48f36e1cded0125596e4b6758 52172 utils extra liblz4-tool_0.0~r131-2+deb9u1_amd64.deb ef21c49f9d77f3e1d109eb4cda697c64 6694 utils extra lz4_0.0~r131-2+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmCbrBgACgkQHpU+J9Qx Hlj/yRAAryFCNrFisl9/OG5pOQI48kbJvVweys6G/aiNE0LEt+2ueM0eM95xmbqD cJgEfkwqg8WQVRcKqtztt1kcRl00wBRBvfrxhcplf/9eprSsaBZhQHuCKIRx264y Eh5C8HYHdP1Pbz5LHMVeqzTfmh/+v7zJPzDEoohmMGpEGeMYTgpQd2SKl5lZ3tK1 Jv/kZ3glUIXChdzrPenSXEIkVvz8GVACXzdpgEmNMdMza6vPwCDDI4FoFIyUDYC1 pXDvaluQd2XsfcPQK2UrD38jMeuSRGonELnYh7T3DNvLJY+78yY28bzh0qB67xhw JC9i0RNfHHAoTvx/N1VApSxxqoT/v4GmU/aWYDXQ7qnTKqH9djg0BlMd6GyMqBQ/ MJLUoB8SObvCS4i8iFX/ZV1+keU1Cv0NiUs+o3pofDqW4HtXwYir5+wW97d/GS5h cUrVptb911CmG4aPoUeuhidKNvbqHmLQuoKl/HLkkUXMO3kGU5YKgxHXoJ3v722o QQAxm+mstKSVl5XvE/QHew4nh30EIBR1YIV22UFuxGuWQtrHJ/34mjQGdKDQOruK LrBxiwfs8u5GiOkHHYZQyOlUH3cgW+4hEVIcVN7M8H+wEL/aTN6t1W/r3xBy5HnG i7Q9m0Ri4nRxqpNF0Y9pIG81gzn8jjPuzVBMBfgpxGkFN9RgMik= =x/up -----END PGP SIGNATURE-----