From a4bad93183d267f5eb5eb3c0aba9af45f1ca0f097a047d95675324f9985d808f Mon Sep 17 00:00:00 2001 From: Petr Gajdos Date: Tue, 22 Sep 2020 13:01:01 +0000 Subject: [PATCH] * fixes CVE-2019-17543 [bsc#1153936] OBS-URL: https://build.opensuse.org/package/show/Archiving/lz4?expand=0&rev=46 --- lz4.changes | 1 + lz4.spec | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/lz4.changes b/lz4.changes index b6b6356..61d1cbf 100644 --- a/lz4.changes +++ b/lz4.changes @@ -11,6 +11,7 @@ Tue Oct 15 14:48:45 UTC 2019 - pgajdos@suse.com * decompression functions were reading a few bytes beyond input size * api: lz4frame initializers compatibility with c++, reported by @degski * cli : added command --list, based on a patch by @gabrielstedman + * fixes CVE-2019-17543 [bsc#1153936] ------------------------------------------------------------------- Thu Jun 6 18:26:39 UTC 2019 - Jan Engelhardt diff --git a/lz4.spec b/lz4.spec index 7aa2015..4fb541e 100644 --- a/lz4.spec +++ b/lz4.spec @@ -1,7 +1,7 @@ # # spec file for package lz4 # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,7 +23,7 @@ Release: 0 Summary: Hash-based Predictive Lempel–Ziv compressor License: GPL-2.0-or-later AND BSD-2-Clause Group: Productivity/Archiving/Compression -Url: https://lz4.github.io/lz4/ +URL: https://lz4.github.io/lz4/ #Git-Clone: https://github.com/lz4/lz4 Source: https://github.com/lz4/lz4/archive/v%version.tar.gz#/%name-%version.tar.gz