Two compression libraries that are in practically everything got updates, Phoronix reports.
Zlib 1.4
- More than a dozen security fixes: buffer overflows, overrunning writes, reading before the start of input or outside the window, and copying uninitialized memory
- Several minizip security fixes, plus CMake updates and Android large file support
LZ4 1.11
- Multi-threaded compression moves into liblz4 itself, so apps using the library get it too, with a setting for the number of workers
- The lz4 CLI gets a –memory option to cap memory use
My take
Zlib is the one to watch. Your distro will either ship 1.4 or backport the fixes, and apps that bundle their own copy need updates too. I wrote up a how-to for checking.
God Bless, and Happy hacking!
