Security update for zstd (moderate)

An update that solves one vulnerability and has two fixes
is now available.

Description:

This update for zstd to version 1.4.2 fixes the following issues:

Security issues fixed:

• CVE-2019-11922: Fixed race condition in one-pass compression functions
  that could allow out of bounds write (boo#1142941).

Non-security issues fixed:

• Added --[no-]compress-literals CLI flag to enable or disable literal
  compression.
• Added new --rsyncable mode.
• Added handling of -f flag to zstdgrep.
• Added CPU load indicator for each file on -vv mode.
• Changed --no-progress flag to preserve the final summary.
• Added new command --adapt for compressed network piping of data adjusted
  to the perceived network conditions.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2019-1845=1