<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 09:59:51 +0000</lastBuildDate>
    <item>
      <title>CVE-2021-24031</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2021-24031</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Facebook Zstandard&lt;/p&gt;
&lt;p&gt;In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Facebook Zstandard&lt;/p&gt;
&lt;p&gt;In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2021-24031</guid>
    </item>
    <item>
      <title>USN-4760-1 — libzstd vulnerabilities</title>
      <link>https://vulnerability.circl.lu/vuln/usn-4760-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:18.04:LTS: libzstd, Ubuntu:20.04:LTS: libzstd&lt;/p&gt;
&lt;p&gt;It was discovered that libzstd incorrectly handled file permissions. A
local attacker could possibly use this issue to access certain files,
contrary to expectations.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:18.04:LTS: libzstd, Ubuntu:20.04:LTS: libzstd&lt;/p&gt;
&lt;p&gt;It was discovered that libzstd incorrectly handled file permissions. A
local attacker could possibly use this issue to access certain files,
contrary to expectations.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-4760-1</guid>
    </item>
  </channel>
</rss>
