CVE-2025-62813 was rejected

do not ignore testsuite results
CVE-2025-62813
2025-11-05 09:46:28 +01:00 · 2025-10-29 14:05:18 +01:00 · 2025-10-29 12:22:32 +01:00 · 2025-08-20 09:48:45 +02:00 · 2024-08-16 10:22:54 +00:00 · 2024-08-15 07:13:58 +00:00
2 changed files with 18 additions and 2 deletions
--- a/lz4.changes
+++ b/lz4.changes
@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Wed Nov  5 08:04:49 UTC 2025 - pgajdos@suse.com
+
+- CVE-2025-62813 was rejected [bsc#1252557]
+- deleted patches
+  * lz4-CVE-2025-62813.patch
+
+-------------------------------------------------------------------
+Wed Oct 29 10:49:47 UTC 2025 - pgajdos@suse.com
+
+- security update
+- added patches
+  CVE-2025-62813 [bsc#1252557], incorrect error handling when passing
+   a NULL pointer to lz4frame functions allows for application crash
+   when processing untrusted LZ4 frames
+  * lz4-CVE-2025-62813.patch
+
 -------------------------------------------------------------------
 Wed Aug 14 16:09:45 UTC 2024 - Ben Greiner <code@bnavigator.de>

--- a/lz4.spec
+++ b/lz4.spec
@@ -84,8 +84,7 @@ applications that want to make use of liblz4.

 %check
 LD_LIBRARY_PATH="%buildroot/%_libdir" ldd -r "%buildroot/%_bindir/lz4"
-# TS fails on its own help output
-%make_build check -k || :
+%make_build check -k

 %post   -n %lname -p /sbin/ldconfig
 %postun -n %lname -p /sbin/ldconfig
Author	SHA256	Message	Date
Petr Gajdos	f1d9301fb2	CVE-2025-62813 was rejected	2025-11-05 09:46:28 +01:00
Petr Gajdos	d1dd6a4408	do not ignore testsuite results	2025-10-29 14:05:18 +01:00
Petr Gajdos	118a5757b0	CVE-2025-62813	2025-10-29 12:22:32 +01:00
Adrian Schröter	317ff8909c	Sync changes to SLFO-1.2 branch	2025-08-20 09:48:45 +02:00
Dominique Leuenberger	25007eba8c	Accepting request 1194080 from Archiving - Switch to cmake build system: Creates extra cmake modules for consuming projects OBS-URL: https://build.opensuse.org/request/show/1194080 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/lz4?expand=0&rev=22	2024-08-16 10:22:54 +00:00
OBS User unknown	f1f9b767f3	[info=45c107641fe2b47b8d433842d0ff23738f0534636749a260257bbee35bab5e5e] OBS-URL: https://build.opensuse.org/package/show/Archiving/lz4?expand=0&rev=58	2024-08-15 07:13:58 +00:00
Jan Engelhardt	a5681a5fba	[info=e0d13e3387e54a9938a9761fd4d9d729404f34eb6775303056783eeba56cc998] OBS-URL: https://build.opensuse.org/package/show/Archiving/lz4?expand=0&rev=57	2024-07-25 02:46:53 +00:00
Dominique Leuenberger	3062caa161	Accepting request 1189058 from Archiving - Update to release 1.10.0 OBS-URL: https://build.opensuse.org/request/show/1189058 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/lz4?expand=0&rev=21	2024-07-24 13:33:09 +00:00
Jan Engelhardt	22b831a39f	- Update to release 1.10.0 OBS-URL: https://build.opensuse.org/package/show/Archiving/lz4?expand=0&rev=55	2024-07-22 12:21:03 +00:00