[Git][security-tracker-team/security-tracker][master] lz4-java/bookworm

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
83ef14ca by Bastien Roucariès at 2026-10-08T16:09:56+02:00
lz4-java/bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1223,22 +1223,27 @@ CVE-2026-106454 (Twisted is an event-based framework for internet applications,
 	NOTE: Fixed by: https://github.com/twisted/twisted/commit/2f8a3c29246f4eb324690e06a9767a11dc4aec9f
 CVE-2026-106453 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ ...)
 	- lz4-java 1.11.2+ds1-1
+	[bookworm] - lz4-java <postponed> (minor issue)
 	NOTE: https://github.com/yawkat/lz4-java/security/advisories/GHSA-6cx8-rjf8-pr8g
 	NOTE: Fixed by: https://github.com/yawkat/lz4-java/commit/6492ce5aca6bd03ff9e08ee18a2beb94c431371a (v1.11.2)
 CVE-2026-106452 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, ne ...)
 	- lz4-java 1.11.2+ds1-1
+	[bookworm] - lz4-java <postponed> (minor issue; DoS)
 	NOTE: https://github.com/yawkat/lz4-java/security/advisories/GHSA-4v53-57pg-c464
 	NOTE: Fixed by: https://github.com/yawkat/lz4-java/commit/bb83dd16163cdb71231af06b0a5651881148a634 (v1.11.2)
 CVE-2026-106451 (yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1. ...)
 	- lz4-java <unfixed> (bug #1150247)
+	[bookworm] - lz4-java <postponed> (minor issue)
 	NOTE: https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g
 	NOTE: Fixed by: https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3 (v1.11.4)
 CVE-2026-106450 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, ne ...)
 	- lz4-java <unfixed> (bug #1150247)
+	[bookworm] - lz4-java <postponed> (minor issue; DoS)
 	NOTE: https://github.com/yawkat/lz4-java/security/advisories/GHSA-gm45-99xc-r7wv
 	NOTE: Fixed by: https://github.com/yawkat/lz4-java/commit/2acc0ec1ead226145c62a817c18c8ed49233a283 (v1.11.4)
 CVE-2026-106449 (yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, ne ...)
 	- lz4-java <unfixed> (bug #1150247)
+	[bookworm] - lz4-java <postponed> (minor issue)
 	NOTE: https://github.com/yawkat/lz4-java/security/advisories/GHSA-343h-94h5-c4wr
 	NOTE: Fixed by: https://github.com/yawkat/lz4-java/commit/c8ebf97d504fb34434fda46fc761e8202570e0d8 (v1.11.4)
 CVE-2026-106448 (StableLib is a stable library of useful TypeScript and JavaScript code ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ef14ca25848803a9d42b0368715c142a12f6a7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ef14ca25848803a9d42b0368715c142a12f6a7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/ce4090b9/attachment.htm>