SUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

OPENSUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

SUSE-SU-2021:3444-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements bsc1183543, bsc1183545, bsc1183632 - PGP hardening changes bsc1185299 - Fixed potential access of freed mem in ndb's glue code bsc1179416...

Security update for rpm (important)

openSUSE Security Update: Security update for rpm Announcement ID: openSUSE-SU-2021:3445-1 Rating: important References: 1183659 1185299 1187670 1188548 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for rpm fixes the...

EulerOS 2.0 SP8 : zstd (EulerOS-SA-2021-2490)

According to the versions of the zstd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions matching the...

Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2021-2490)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-27772

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 1 crash type. The crash state involves several function calls, including FSE writeNCount generic, FSE...

zstd:simple_compress: Heap-buffer-overflow in FSE_writeNCount_generic

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5377998337998848 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: simplecompress Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x61b0000006...

CVE-2021-24032 affecting package zstd 1.4.4-1

CVE-2021-24032 affecting package zstd 1.4.4-1. An upgraded version of the package is available that resolves this issue...

Security update for spectre-meltdown-checker (moderate)

openSUSE Security Update: Security update for spectre-meltdown-checker Announcement ID: openSUSE-SU-2021:1212-1 Rating: moderate References: 1189477 Cross-References: CVE-2017-5753 CVSS scores: CVE-2017-5753 NVD : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2017-5753 SUSE: 7.1...

openSUSE: Security Advisory for spectre-meltdown-checker (openSUSE-SU-2021:2861-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for spectre-meltdown-checker (moderate)

openSUSE Security Update: Security update for spectre-meltdown-checker Announcement ID: openSUSE-SU-2021:2861-1 Rating: moderate References: 1189477 Cross-References: CVE-2017-5753 CVSS scores: CVE-2017-5753 NVD : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2017-5753 SUSE: 7.1...

EulerOS 2.0 SP9 : zstd (EulerOS-SA-2021-2286)

According to the versions of the zstd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with...

Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2021-2286)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2021-2260)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : zstd (EulerOS-SA-2021-2260)

According to the versions of the zstd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with...

PT-2021-27676

Name of the Vulnerable Software and Affected Versions: ZSTD affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the ZSTD decompressBlock internal, ZSTD decompressMultiFrame, and ZSTD decompressDCtx...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in ZSTD_decompressBlock_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5881749933522944 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf2713428 Crash State:...

PT-2021-28357

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash state involving the ZSTD createDDict advanced, ZSTD createDDict, and blosc run decompression...

EulerOS Virtualization 2.9.1 : zstd (EulerOS-SA-2021-2177)

According to the versions of the zstd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created...