Fedora 32 : xen (2020-4ff32ef9be)

stack corruption from XSA-346 change XSA-355 ---- support zstd compressed kernels dom0 only based on linux kernel code Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

ALBA-2020:4557 zstd bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

zstd bug fix and enhancement update

An update is available for zstd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

zstd bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

OSV-2020-1060 Use-of-uninitialized-value in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23732 Crash type: Use-of-uninitialized-value Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

PT-2020-21679

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ZSTD createDDict advanced and ZSTD createDDict...

SUSE SLED15 / SLES15 Security Update : zstd (SUSE-SU-2020:1396-2)

This update for zstd fixes the following issues : Fix for build error caused by wrong static libraries. bsc1133297 Correction in spec file marking the license as documentation. bsc1082318 Add new package for SLE-15. jscECO-1886 Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2020:1396-2 Security update for zstd

This update for zstd fixes the following issues: - Fix for build error caused by wrong static libraries. bsc1133297 - Correction in spec file marking the license as documentation. bsc1082318 - Add new package for SLE-15. jscECO-1886...

SUSE-SU-2020:1396-1 Security update for zstd

This update for zstd fixes the following issues: - Fix for build error caused by wrong static libraries. bsc1133297 - Correction in spec file marking the license as documentation. bsc1082318 - Add new package for SLE-15. jscECO-1886...

SUSE-SU-2020:1396-3 Security update for zstd

This update for zstd fixes the following issues: - Fix for build error caused by wrong static libraries. bsc1133297 - Correction in spec file marking the license as documentation. bsc1082318 - Add new package for SLE-15. jscECO-1886...

OSV-2020-691 UNKNOWN WRITE in ZSTD_decodeLiteralsBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16541 Crash type: UNKNOWN WRITE Crash state: ZSTDdecodeLiteralsBlock ZSTDdecompressBlock ZSTDdecompressDCtx...

PT-2020-22480

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a crash in the ZSTD decompression process. Technical details about the crash include the function names ZSTD decodeLiteralsBlock, ZSTD decompressBlock, and ZSTD...

PT-2020-22454

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the ZSTD copy16 function, ZSTD decompressSequences bmi2 function, and ZSTD decompressBlock...

PT-2020-22302

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a stack-buffer-overflow write crash. Technical details about the crash include the ZSTD decodeLiteralsBlock, ZSTD decompressBlock, and ZSTD decompressDCtx functions...

PT-2020-22319

Name of the Vulnerable Software and Affected Versions ZSTD versions affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the ZSTDv05 decodeSequence and ZSTDv05 decompressSequences functions. Recommendation...

OSV-2020-286 Use-of-uninitialized-value in ZSTD_loadCEntropy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19146 Crash type: Use-of-uninitialized-value Crash state: ZSTDloadCEntropy ZSTDloadZstdDictionary ZSTDcompressinsertDictionary...

PT-2020-22227

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of specific functions: ZSTD loadCEntropy, ZSTD...

SUSE SLED15 / SLES15 Security Update : zstd (SUSE-SU-2020:1396-1)

This update for zstd fixes the following issues : Fix for build error caused by wrong static libraries. bsc1133297 Correction in spec file marking the license as documentation. bsc1082318 Add new package for SLE-15. jscECO-1886 Note that Tenable Network Security has extracted the preceding...

openSUSE: Security Advisory for zstd (openSUSE-SU-2019:1845-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

zstd:dictionary_loader: Use-of-uninitialized-value in ZSTD_loadCEntropy

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5685433724043264 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: dictionaryloader Job Type: libfuzzermsanzstd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...