Lucene search

K
suseSuseSUSE-SU-2014:0955-1
HistoryJul 31, 2014 - 7:04 p.m.

Security update for lzo (important)

2014-07-3119:04:17
lists.opensuse.org
18

0.01 Low

EPSS

Percentile

83.9%

lzo has been updated to fix a potential denial of service issue or
possible remote code execution by allowing an attacker, if the LZO
decompression algorithm is used in a threaded or kernel context, to
corrupt memory structures that control the flow of execution in other
contexts. (CVE-2014-4607)

Security Issues:

   * CVE-2014-4607
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4607">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4607</a>&gt;