CVE-2021-24031

CVE-2021-24031 is discussed in the connected IBM security bulletin as part of a broader set of vulnerabilities. The Zstandard command-line utility prior to v1.4.1 creates output files with default permissions and only sets the correct permissions at completion time, potentially making outputs rea...

CVE-2021-24032

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to...

CVE-2021-24031

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions matching the input would only be set at completion time. Output files could therefore be readable or writable to unintended parties...

CVE-2021-24032: Insecure Inherited Permissions

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to...

Zstandard security vulnerabilities

Facebook Zstandard is an open source lossless data compression algorithm from Facebook Inc. in the United States. A security vulnerability exists in the Zstandard command-line utility prior to v1.4.1, which originates from an output file that can be read or written to by unintended parties...

Patching of Veeam Recovery Media fails with "ISO: FATAL ERROR:write_file: failed to create file /tmp/veeam/livecd-..., because Too many open files"

Challenge The patching of the Veeam Recovery Media fails with the error: ISO: FATAL ERROR:writefile: failed to create file /tmp/veeam/livecd-..., because Too many open files Cause Veeam Agent reaches the limit of concurrently opened files during the ISO image unpacking that is performed by means ...

[SECURITY] Fedora 33 Update: skopeo-1.2.2-1.fc33

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

Fedora: Security Advisory for skopeo (FEDORA-2021-fb466fb623)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-24082

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability...

CVE-2021-24082

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability...

CVE-2021-24082

Technical details for CVE-2021-24082 are not publicly available in the provided connected documents. The records list the vulnerability title but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

dexp Junos Unauthorized Access

The vulnerability of the dexp utility in the Junos operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

Debian DLA-2573-1 : libzstd security update

It was discovered that zstd, a compression utility, was vulnerable to a race condition: it temporarily exposed, during a very short timeframe, a world-readable version of its input even if the original file had restrictive permissions. For Debian 9 stretch, this problem has been fixed in version...

[SECURITY] [DLA 2573-1] libzstd security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2573-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 20, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4859-1] libzstd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4859-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 20, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4859-1] libzstd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4859-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 20, 2021 https://www.debian.org/security/faq -...

PT-2021-1012

Name of the Vulnerable Software and Affected Versions: dbxtool affected versions not specified Description: The issue concerns the dbxtool packages, which provide a command line utility and a one-shot systemd service for applying UEFI Secure Boot DBX updates. A bug has been identified where dbxto...

Debian DLA-2559-1 : busybox security update

Busybox, utility programs for small and embedded systems, was affected by several security vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2011-5325 A path traversal vulnerability was found in Busybox implementation of tar. tar will extract a...

CVE-2021-22979

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility when Fraud Protection Service is provisioned...