Mageia: Security Advisory (MGASA-2021-0322)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

zstd:sequence_compression_api: Heap-buffer-overflow in sequence_compression_api.c

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5072043253563392 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: sequencecompressionapi Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address:...

Fedora: Security Advisory for zstd (FEDORA-2022-201509474f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-36832

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a global buffer overflow read. Technical details about the crash include the involvement of specific functions such as ZSTD compressBlock opt0, ZSTD compressBlock btopt,...

zstd:simple_compress: Global-buffer-overflow in ZSTD_compressBlock_opt0

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=4649008717496320 Project: zstd Fuzzing Engine: honggfuzz Fuzz Target: simplecompress Job Type: honggfuzzasanzstd Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

PT-2022-36982

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a crash caused by a memcpy parameter overlap. Technical details about the crash include the function names ZSTD createDDict, blosc run decompression with context, and...

PT-2021-28004

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the ZSTD createDDict, blosc run decompression with context, and blosc2 decompress ctx functions...

OPENSUSE-SU-2021:1366-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements bsc1183543, bsc1183545, bsc1183632 - PGP hardening changes bsc1185299 - Fixed potential access of freed mem in ndb's glue code bsc1179416...

Security update for rpm (important)

openSUSE Security Update: Security update for rpm Announcement ID: openSUSE-SU-2021:1366-1 Rating: important References: 1179416 1183543 1183545 1183632 1183659 1185299 1187670 1188548 Cross-References: CVE-2021-20266 CVE-2021-20271 CVE-2021-3421 CVSS scores: CVE-2021-20266 NVD : 4.9...

openSUSE: Security Advisory for rpm (openSUSE-SU-2021:3445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

OPENSUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

SUSE-SU-2021:3444-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements bsc1183543, bsc1183545, bsc1183632 - PGP hardening changes bsc1185299 - Fixed potential access of freed mem in ndb's glue code bsc1179416...

Security update for rpm (important)

openSUSE Security Update: Security update for rpm Announcement ID: openSUSE-SU-2021:3445-1 Rating: important References: 1183659 1185299 1187670 1188548 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for rpm fixes the...

EulerOS 2.0 SP8 : zstd (EulerOS-SA-2021-2490)

According to the versions of the zstd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions matching the...

Huawei EulerOS: Security Advisory for zstd (EulerOS-SA-2021-2490)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-27772

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 1 crash type. The crash state involves several function calls, including FSE writeNCount generic, FSE...

zstd:simple_compress: Heap-buffer-overflow in FSE_writeNCount_generic

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5377998337998848 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: simplecompress Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x61b0000006...

CVE-2021-24032 affecting package zstd 1.4.4-1

CVE-2021-24032 affecting package zstd 1.4.4-1. An upgraded version of the package is available that resolves this issue...

Security update for spectre-meltdown-checker (moderate)

openSUSE Security Update: Security update for spectre-meltdown-checker Announcement ID: openSUSE-SU-2021:1212-1 Rating: moderate References: 1189477 Cross-References: CVE-2017-5753 CVSS scores: CVE-2017-5753 NVD : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2017-5753 SUSE: 7.1...