==========================================================================
Ubuntu Security Notice USN-4108-1
August 21, 2019

libzstd vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS

Summary:

Zstandard could be made to execute arbitrary code if it received
specially crafted input.

Software Description:
– libzstd: fast lossless compression algorithm — development files

Details:

It was discovered that Zstandard incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
libzstd1 1.3.3+dfsg-2ubuntu1.1
zstd 1.3.3+dfsg-2ubuntu1.1

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4108-1
CVE-2019-11922

Package Information:
https://launchpad.net/ubuntu/+source/libzstd/1.3.3+dfsg-2ubuntu1.1
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
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=Uuhu
—–END PGP SIGNATURE—–
—