Closed patrick246 closed 4 years ago
The latest released version, 1.6.0 contains a vulnerable LZ4 version (1.9.1, CVE-2019-17543). When will a new version with LZ4 1.9.2 be released? This vulnerability turns up in our dependency security check.
I'm shooting for early November.
Do we have an updated ETA?
I was fixing issues on macOS and Windows. Will release a new version in a few days unless I hit a new problem.
Released 1.7.0.
The latest released version, 1.6.0 contains a vulnerable LZ4 version (1.9.1, CVE-2019-17543). When will a new version with LZ4 1.9.2 be released? This vulnerability turns up in our dependency security check.