452 matches found
EulerOS 2.0 SP9 : zstd (EulerOS-SA-2021-2260)
According to the versions of the zstd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with...
EulerOS Virtualization 2.9.0 : zstd (EulerOS-SA-2021-2201)
According to the versions of the zstd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created...
EulerOS Virtualization 2.9.1 : zstd (EulerOS-SA-2021-2177)
According to the versions of the zstd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created...
Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2021-2201)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2021-2177)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:1396-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:1396-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2021:0948-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for zstd (openSUSE-SU-2021:0481-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : zstd (openSUSE-2021-481)
This update for zstd fixes the following issues : - CVE-2021-24031: Added read permissions to files while being compressed or uncompressed bsc1183371. - CVE-2021-24032: Fixed a race condition which could have allowed an attacker to access world-readable destination file bsc1183370. This update wa...
OPENSUSE-SU-2021:0481-1 Security update for zstd
This update for zstd fixes the following issues: - CVE-2021-24031: Added read permissions to files while being compressed or uncompressed bsc1183371. - CVE-2021-24032: Fixed a race condition which could have allowed an attacker to access world-readable destination file bsc1183370. This update was...
Security update for zstd (moderate)
openSUSE Security Update: Security update for zstd Announcement ID: openSUSE-SU-2021:0481-1 Rating: moderate References: 1183370 1183371 Cross-References: CVE-2021-24031 CVE-2021-24032 CVSS scores: CVE-2021-24031 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2021-24031 SUSE: 6.2...
SUSE SLED15 / SLES15 Security Update : zstd (SUSE-SU-2021:0948-1)
This update for zstd fixes the following issues : CVE-2021-24031: Added read permissions to files while being compressed or uncompressed bsc1183371. CVE-2021-24032: Fixed a race condition which could have allowed an attacker to access world-readable destination file bsc1183370. Note that Tenable...
SUSE-SU-2021:0948-1 Security update for zstd
This update for zstd fixes the following issues: - CVE-2021-24031: Added read permissions to files while being compressed or uncompressed bsc1183371. - CVE-2021-24032: Fixed a race condition which could have allowed an attacker to access world-readable destination file bsc1183370...
Insecure Default
Overview Affected versions of this package are vulnerable to Insecure Default. In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions matching the input would only be set at completion time. Output files could therefore ...
CVE-2021-24031
A flaw was found in zstd. While the final file mode is reflective of the input file, when compressing or uncompressing, the file can temporarily gain greater permissions than the input and potentially leading to security issues especially if large files are being handled...
CVE-2021-24032
A flaw was found in zstd. While the final file mode is reflective of the input file, when compressing or uncompressing, the file can temporarily gain greater permissions than the input and potentially leading to security issues especially if large files are being handled...
Fedora 32 : xen (2020-4ff32ef9be)
stack corruption from XSA-346 change XSA-355 ---- support zstd compressed kernels dom0 only based on linux kernel code Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
zstd bug fix and enhancement update
An update is available for zstd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...