From 95b421da8638c091366bbf6fca0df30163c467be31f871dcb002df6bca75694a Mon Sep 17 00:00:00 2001 From: Bernhard Wiedemann Date: Fri, 2 Aug 2019 09:16:34 +0000 Subject: [PATCH] add CVE to 1.3.8 changelog: * fix race condition in one-pass compression functions that could allow out of bounds write (CVE-2019-11922, boo#1142941) OBS-URL: https://build.opensuse.org/package/show/Archiving/zstd?expand=0&rev=41 --- zstd.changes | 2 ++ 1 file changed, 2 insertions(+) diff --git a/zstd.changes b/zstd.changes index 2feaeb3..b34f27c 100644 --- a/zstd.changes +++ b/zstd.changes @@ -95,6 +95,8 @@ Sat Jan 5 13:57:58 UTC 2019 - astieger@suse.com * support ZSTD_CLEVEL environment variable * --no-progress flag, preserving final summary * various CLI fixes + * fix race condition in one-pass compression functions that could + allow out of bounds write (CVE-2019-11922, boo#1142941) ------------------------------------------------------------------- Wed Oct 24 08:29:38 UTC 2018 - astieger@suse.com