Unbreakable Enterprise kernel security update

5.15.0-0.30.19 - net/mlx4: Increase numsrq in lowmemprofile Dave Kleikamp Orabug: 34052160 5.15.0-0.30.18 - Revert ocfs2: mount shared volume without ha stack Junxiao Bi Orabug: 33701900 - KVM: x86/speculation: Disable Fill buffer clear within guests Pawan Gupta Orabug: 34202258 CVE-2022-21123...

Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2022-1957)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : zstd (EulerOS-SA-2022-1957)

According to the versions of the zstd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if...

new packages: zstd

An update is available for zstd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2022-1104)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : zstd (EulerOS-SA-2022-1104)

According to the versions of the zstd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions...

PT-2022-36713

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a heap buffer overflow, specifically a WRITE 1 crash type. Technical details about the crash state include the functions ZSTD compressLiterals, ZSTD...

zstd:sequence_compression_api: Heap-buffer-overflow in ZSTD_compressLiterals

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=6749389635321856 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: sequencecompressionapi Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

Mageia: Security Advisory (MGASA-2021-0322)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0323)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0257)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

zstd:sequence_compression_api: Heap-buffer-overflow in sequence_compression_api.c

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5072043253563392 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: sequencecompressionapi Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address:...

Fedora: Security Advisory for zstd (FEDORA-2022-201509474f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-36832

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a global buffer overflow read. Technical details about the crash include the involvement of specific functions such as ZSTD compressBlock opt0, ZSTD compressBlock btopt,...

zstd:simple_compress: Global-buffer-overflow in ZSTD_compressBlock_opt0

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=4649008717496320 Project: zstd Fuzzing Engine: honggfuzz Fuzz Target: simplecompress Job Type: honggfuzzasanzstd Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

PT-2022-36982

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a crash caused by a memcpy parameter overlap. Technical details about the crash include the function names ZSTD createDDict, blosc run decompression with context, and...

PT-2021-28004

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the ZSTD createDDict, blosc run decompression with context, and blosc2 decompress ctx functions...

OPENSUSE-SU-2021:1366-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements bsc1183543, bsc1183545, bsc1183632 - PGP hardening changes bsc1185299 - Fixed potential access of freed mem in ndb's glue code bsc1179416...

Security update for rpm (important)

openSUSE Security Update: Security update for rpm Announcement ID: openSUSE-SU-2021:1366-1 Rating: important References: 1179416 1183543 1183545 1183632 1183659 1185299 1187670 1188548 Cross-References: CVE-2021-20266 CVE-2021-20271 CVE-2021-3421 CVSS scores: CVE-2021-20266 NVD : 4.9...

openSUSE: Security Advisory for rpm (openSUSE-SU-2021:3445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...