CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

archivers/linux-rl9-lz41.9.3_1

LZ4 compression library and utilities (Rocky Linux 9.8)

1
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
emulation@FreeBSD.org
Packages
linux-rl9-lz4 1.9.3_1
Upstream
up to date
CPE
lz4_project:lz4 from the port
WWW
https://lz4.github.io/lz4/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2021-35209.8published 2021-06-02

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrit…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (6)

Matthias Andree (mandree) · 1.9.3_1
archivers/linux-rl9-lz4: Add missing LICENSE file.

Reported by:	rdunkle@smallcatbrain.com
PR:		290969
Fixes:		c1750a9fe1944085c953dac1fe9a1c8ee6539231
PR:		287782
078e9c6dc8
Matthias Andree (mandree) · 1.9.3_1
archivers/linux-*-lz4: add LICENSE

PR:		287782
PR:		287779
c1750a9fe1
Gleb Popov (arrowd) · 1.9.3_1
linux-rl9*: Stop installing build-id files

- They complicate pkg-plist manipulations
- They increase the package's size
- They are used for debugging and it is unlikely that someone would debug
  binaries coming from Linux RPMs
cebd2ae6f1
Dima Panov (fluffy) · 1.9.3_1
*/*: Introduce Rocky Linux 9 32-bit compat librariries (+)

Finaly we can get Linux Steam utils works again! :)

While here, pet reative paths

Sponsored by:	Future Crew, LLC
7dbd23b9e8
Gleb Popov (arrowd) · 1.9.3
Linuxulator ports: Add aarch64 support for Rocky Linux 9

Sponsored by:	Serenity Cybersecurity, LLC
8c7209e0d9
Gleb Popov (arrowd) · 1.9.3
Linuxulator ports: Introduce Rocky Linux 9.

Sponsored by:	Serenity Cybersecurity, LLC
Co-authored-by:	Dima Panov <fluffy@FreeBSD.org>
5aa75e1ca0