CVE-2021-24032 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Access restriction bypass |
| Description | Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1627 | zstd | 1.4.8-1 | 1.4.9-1 | Medium | Fixed |