CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

archivers/linux-c7-lz41.8.3

LZ4 compression library and utilities (Linux CentOS 7.9.2009)

2
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
emulation@FreeBSD.org
Packages
linux-c7-lz4 1.8.3
Upstream
up to date
CPE
lz4_project:lz4 from the port
WWW
https://lz4.github.io/lz4/
Links
cgit · VuXML

Unaddressed (2) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2021-35209.82021-06-02There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove…
CVE-2019-175438.12019-10-14LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large inpu…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (10)

Matthias Andree (mandree) · 1.8.3
archivers/linux-*-lz4: add LICENSE

PR:		287782
PR:		287779
c1750a9fe1
Stefan Eßer (se) · 1.8.3
Add missing WWW entries

These ports reference the pkg-descr file of some other port and used
to get the WWW entry from that other port's file.

Reported by:	dan@langille.org (Dan Langille)
60764ff075
Mikael Urankar (mikael) · 1.8.3
*: Linux emulation: add support for aarch64

PR:		256008
Submitted by:	Vincent Milum Jr (prior version)
Approved by:	emulation (maintainer timeout)
c7dd5ca11a
Bernhard Froehlich (decke) · 1.8.3
archivers/linux-c7-lz4: Add CPE information

Approved by:	portmgr (blanket)
e30feae6e7
Mathieu Arnold (mat) · 1.8.3
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.8.3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tijl Coosemans (tijl) · 1.8.3
Update Linux CentOS ports to 7.9.2009.
9aae2889e0
Tijl Coosemans (tijl) · 1.7.5_1
Update to CentOS 7.7.1908.

Put libdrm into a separate port so it can be kept at the CentOS 7.6 version.
The new version fails to detect graphics hardware on FreeBSD.
e4c0bd396a
Tijl Coosemans (tijl) · 1.7.5
Fix CATEGORIES.

Reported by:	FreshPorts sanity daemon
ac1c7bf066
Tijl Coosemans (tijl) · 1.7.5
Add archivers/linux-c7-lz4, required by upcoming linux-c7-systemd-libs.
a0a03e4f48