Summary
It was discovered that libzstd incorrectly handled file permissions. A
local attacker could possibly use this issue to access certain files,
contrary to expectations.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libzstd | 1.3.3+dfsg-2ubuntu1.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | libzstd | 1.4.4+dfsg-3ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file…
-
Unscored —
Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utilit…