Vulnerable: version 0.631 is affected by 20 known vulnerabilities. See below.
archivers/lrzip 0.631 NetBSD
Long Range ZIP or Lzma RZIP
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- gnu-gpl-v2
- Categories
- archivers
- Package size
- 228.2 KiB, 1248.4 KiB installed
Description
Compression program optimised for large files. The larger the file and the more memory you have, the better the compression advantage this will provide, especially once the files are larger than 100MB. The advantage can be chosen to be either size (much smaller than bzip2) or speed (much faster than bzip2).
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | archivers/lrzip | 0.631 |
| FreeBSD | archivers/lrzip | 0.7.3,1 |
| OpenBSD | archivers/lrzip | 0.651p1 |
| DragonFly | archivers/lrzip | 0.651_1 |
| HardenedBSD | archivers/lrzip | 0.7.3,1 |
| GhostBSD | archivers/lrzip | 0.7.3,1 |
Install
Binary package:
pkgin install lrzip
From pkgsrc:
cd /usr/pkgsrc/archivers/lrzip && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 0.631 |
| NetBSD 10.1 aarch64 | 0.631 |
| SmartOS / illumos x86_64 | 0.631 |
| macOS 15 arm64 | 0.631 |
Dependencies
Run dependencies 2
No port depends on this one.
Known vulnerabilities 20
- lrzip: denial-of-service (CVE-2017-8842)
- lrzip: null-dereference (CVE-2017-8843)
- lrzip: heap-overflow (CVE-2017-8844)
- lrzip: denial-of-service (CVE-2017-8845)
- lrzip: use-after-free (CVE-2017-8846)
- lrzip: null-dereference (CVE-2017-8847)
- lrzip: denial-of-service (CVE-2017-9928)
- lrzip: denial-of-service (CVE-2017-9929)
- lrzip: denial-of-service (CVE-2018-10685)
- lrzip: use-after-free (CVE-2018-11496)
- lrzip: infinite-loop (CVE-2018-5650)
- lrzip: use-after-free (CVE-2018-5747)
- lrzip: infinite-loop (CVE-2018-5786)
- lrzip: infinite-loop (CVE-2018-9058)
- lrzip: null-pointer-dereference (CVE-2020-25467)
- lrzip: denial-of-service (CVE-2021-27345)
- lrzip: denial-of-service (CVE-2021-27347)
- lrzip: memory-leak (CVE-2021-33451)
- lrzip: use-after-free (CVE-2021-33453)
- lrzip: use-after-free (CVE-2022-26291)