Security Bulletin:Vulnerability in zstd affects IBM Netezza Appliance

Summary The zstd package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2021-24032 Vulnerability Details CVEID:CVE-2021-24032 DESCRIPTION: Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line...

EUVD-2023-0287

Malicious code in bioql PyPI...

Alibaba Cloud Linux 3 : 0032: mysql:8.0 (ALINUX3-SA-2024:0032)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0032 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-4899: A vulnerability was found i...

Medium: zstd

Issue Overview: In zstd, supplying an empty string as an argument to either --output-dir-flat or --output-dir-mirror may cause a buffer overrun. CVE-2022-4899 Affected Packages: zstd Issue Correction: Run dnf update zstd --releasever 2023.1.20230719 or dnf update --advisory ALAS2023-2023-244...

CVE-2022-4899

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

UBUNTU-CVE-2022-4899

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

CVE-2022-4899

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

PT-2023-15909

Name of the Vulnerable Software and Affected Versions zstd version 1.4.10 MySQL Server versions 8.0.33 and earlier Description A vulnerability was found where an attacker can supply an empty string as an argument to the command line tool to cause buffer overrun. This issue can be exploited by a...