zstd (SUSE:Linux Enterprise Module for Basesystem 15 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP2 package zstd, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-24031 — CVSS 5.5 (medium): In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions…
• CVE-2021-24032 — CVSS 4.7 (medium): Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output…