Stay Secure with the Latest Linux Advisories

security advisorymoderatesoftware update

Mageia 8 MGASA-2021-0323 Moderate Zstandard Permission Issue

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties (CVE-2021-24032). . MGASA-2021-0323 - Updated zstd packages fix a security vulnerability Publication date: 09 Jul 2021 URL: https://advisories.mageia.org/MGASA-2021-0323.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-24032 Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties (CVE-2021-24032). References: - https://bugs.mageia.org/show_bug.cgi?id=28444 - https://ubuntu.com/security/notices/USN-4760-1 - https://www.cve.org/CVERecord?id=CVE-2021-24032 SRPMS: - 8/core/zstd-1.4.8-1.1.mga8 . MGASA-2021-0324 relates to a partial resolution for output file permissions in the Zstandard tool. Discover additional details.. Mageia Security Update,Zstandard Command-Line Utility,File Permission Fix. . LinuxSecurity.com Team

Jul 08, 2021 Mageia