CVE-2025-62813 was rejected

lz4.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Wed Nov  5 08:04:49 UTC 2025 - pgajdos@suse.com
+
+- CVE-2025-62813 was rejected [bsc#1252557]
+- deleted patches
+  * lz4-CVE-2025-62813.patch
+
+-------------------------------------------------------------------
+Wed Oct 29 10:49:47 UTC 2025 - pgajdos@suse.com
+
+- security update
+- added patches
+  CVE-2025-62813 [bsc#1252557], incorrect error handling when passing
+   a NULL pointer to lz4frame functions allows for application crash
+   when processing untrusted LZ4 frames
+  * lz4-CVE-2025-62813.patch
+
 -------------------------------------------------------------------
 Wed Aug 14 16:09:45 UTC 2024 - Ben Greiner <code@bnavigator.de>
 

lz4.spec

@@ -84,8 +84,7 @@ applications that want to make use of liblz4.
 
 %check
 LD_LIBRARY_PATH="%buildroot/%_libdir" ldd -r "%buildroot/%_bindir/lz4"
-# TS fails on its own help output
-%make_build check -k || :
+%make_build check -k
 
 %post   -n %lname -p /sbin/ldconfig
 %postun -n %lname -p /sbin/ldconfig