Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-24032 →

DEBIAN-CVE-2021-24032

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with def...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libzstd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.8+dfsg-2"}]}]

Debian:13 libzstd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.8+dfsg-2"}]}]

Debian:14 libzstd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.8+dfsg-2"}]}]

Références

advisory security-tracker.debian.org