Security update for zstd (moderate)

ID OPENSUSE-SU-2019:1845-1
Type suse
Reporter Suse
Modified 2019-08-12T21:11:46


This update for zstd to version 1.4.2 fixes the following issues:

Security issues fixed:

  • CVE-2019-11922: Fixed race condition in one-pass compression functions that could allow out of bounds write (boo#1142941).

Non-security issues fixed:

  • Added --[no-]compress-literals CLI flag to enable or disable literal compression.
  • Added new --rsyncable mode.
  • Added handling of -f flag to zstdgrep.
  • Added CPU load indicator for each file on -vv mode.
  • Changed --no-progress flag to preserve the final summary.
  • Added new command --adapt for compressed network piping of data adjusted to the perceived network conditions.