Beware: Vulnerabilities in LZO and LZ4 compression libraries can affect you.
Connectikpeople.co soon #Retinknow®, recalls that, recently disclosed
vulnerabilities in the LZO and LZ4 compression libraries could allow remote
code execution under certain circumstances. While these libraries are used by a
large number of platforms and applications, not all programs may be vulnerable
to exploitation.
However, Connectikpeople.co soon #Retinknow®, recommends that all
developers who either implement or import the LZO or LZ4 libraries into their
software check for susceptibility to CVE-2014-4608, CVE-2014-4715, and CVE-2014-4611.
Users and administrators should apply software security updates as they
become available.