{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "adds read permissions to files while being compressed or uncompressed", "tracking": { "current_release_date": "2026-07-24T22:13:46+00:00", "generator": { "date": "2026-07-24T22:13:46+00:00", "engine": { "name": "CSAF Generator", "version": "3.1.0" } }, "id": "CVE-2021-24031", "initial_release_date": "2021-02-11T00:00:00+00:00", "revision_history": [ { "date": "2026-07-24T22:13:46+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Ceph Storage 3.3", "product": { "name": "Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:ceph_storage:3" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.12", "product": { "name": "OpenShift Container Platform 4.12", "product_id": "openshift-4.12.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.12" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.13", "product": { "name": "OpenShift Container Platform 4.13", "product_id": "openshift-4.13.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.13" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.14", "product": { "name": "OpenShift Container Platform 4.14", "product_id": "openshift-4.14.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.14" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.15.z", "product": { "name": "OpenShift Container Platform 4.15.z", "product_id": "openshift-4.15.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.15" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.16.z", "product": { "name": "OpenShift Container Platform 4.16.z", "product_id": "openshift-4.16.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.16" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.17", "product": { "name": "OpenShift Container Platform 4.17", "product_id": "openshift-4.17", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.17" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.18", "product": { "name": "OpenShift Container Platform 4.18", "product_id": "openshift-4.18", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.18" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.19", "product": { "name": "OpenShift Container Platform 4.19", "product_id": "openshift-4.19", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.19" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.20", "product": { "name": "OpenShift Container Platform 4.20", "product_id": "openshift-4.20", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.20" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform 16.1 (Train)", "product": { "name": "Red Hat OpenStack Platform 16.1 (Train)", "product_id": "openstack-16.1-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:16.1" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.4.z", "product": { "name": "Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.6.z", "product": { "name": "Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7", "product": { "name": "Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7.z", "product": { "name": "Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.8", "product": { "name": "Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "ceph-base", "product": { "name": "ceph-base", "product_id": "ceph-base", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-base" } } }, { "category": "product_version", "name": "ceph-common", "product": { "name": "ceph-common", "product_id": "ceph-common", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-common" } } }, { "category": "product_version", "name": "ceph-fuse", "product": { "name": "ceph-fuse", "product_id": "ceph-fuse", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-fuse" } } }, { "category": "product_version", "name": "ceph-mds", "product": { "name": "ceph-mds", "product_id": "ceph-mds", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-mds" } } }, { "category": "product_version", "name": "ceph-mgr", "product": { "name": "ceph-mgr", "product_id": "ceph-mgr", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-mgr" } } }, { "category": "product_version", "name": "ceph-mon", "product": { "name": "ceph-mon", "product_id": "ceph-mon", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-mon" } } }, { "category": "product_version", "name": "ceph-osd", "product": { "name": "ceph-osd", "product_id": "ceph-osd", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-osd" } } }, { "category": "product_version", "name": "ceph-radosgw", "product": { "name": "ceph-radosgw", "product_id": "ceph-radosgw", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-radosgw" } } }, { "category": "product_version", "name": "ceph-selinux", "product": { "name": "ceph-selinux", "product_id": "ceph-selinux", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-selinux" } } }, { "category": "product_version", "name": "ceph-test", "product": { "name": "ceph-test", "product_id": "ceph-test", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph-test" } } }, { "category": "product_version", "name": "ceph", "product": { "name": "ceph", "product_id": "ceph.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ceph?arch=src" } } }, { "category": "product_version", "name": "libcephfs-devel", "product": { "name": "libcephfs-devel", "product_id": "libcephfs-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcephfs-devel" } } }, { "category": "product_version", "name": "libcephfs2", "product": { "name": "libcephfs2", "product_id": "libcephfs2", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcephfs2" } } }, { "category": "product_version", "name": "librados-devel", "product": { "name": "librados-devel", "product_id": "librados-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/librados-devel" } } }, { "category": "product_version", "name": "librados2", "product": { "name": "librados2", "product_id": "librados2", "product_identification_helper": { "purl": "pkg:rpm/redhat/librados2" } } }, { "category": "product_version", "name": "libradosstriper1", "product": { "name": "libradosstriper1", "product_id": "libradosstriper1", "product_identification_helper": { "purl": "pkg:rpm/redhat/libradosstriper1" } } }, { "category": "product_version", "name": "librbd-devel", "product": { "name": "librbd-devel", "product_id": "librbd-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/librbd-devel" } } }, { "category": "product_version", "name": "librbd1", "product": { "name": "librbd1", "product_id": "librbd1", "product_identification_helper": { "purl": "pkg:rpm/redhat/librbd1" } } }, { "category": "product_version", "name": "librgw-devel", "product": { "name": "librgw-devel", "product_id": "librgw-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/librgw-devel" } } }, { "category": "product_version", "name": "librgw2", "product": { "name": "librgw2", "product_id": "librgw2", "product_identification_helper": { "purl": "pkg:rpm/redhat/librgw2" } } }, { "category": "product_version", "name": "libzstd", "product": { "name": "libzstd", "product_id": "libzstd", "product_identification_helper": { "purl": "pkg:rpm/redhat/libzstd" } } }, { "category": "product_version", "name": "libzstd-debuginfo", "product": { "name": "libzstd-debuginfo", "product_id": "libzstd-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/libzstd-debuginfo" } } }, { "category": "product_version", "name": "libzstd-devel", "product": { "name": "libzstd-devel", "product_id": "libzstd-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libzstd-devel" } } }, { "category": "product_version", "name": "libzstd-static", "product": { "name": "libzstd-static", "product_id": "libzstd-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libzstd-static" } } }, { "category": "product_version", "name": "python-cephfs", "product": { "name": "python-cephfs", "product_id": "python-cephfs", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cephfs" } } }, { "category": "product_version", "name": "python-rados", "product": { "name": "python-rados", "product_id": "python-rados", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-rados" } } }, { "category": "product_version", "name": "python-rbd", "product": { "name": "python-rbd", "product_id": "python-rbd", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-rbd" } } }, { "category": "product_version", "name": "python-rgw", "product": { "name": "python-rgw", "product_id": "python-rgw", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-rgw" } } }, { "category": "product_version", "name": "rbd-mirror", "product": { "name": "rbd-mirror", "product_id": "rbd-mirror", "product_identification_helper": { "purl": "pkg:rpm/redhat/rbd-mirror" } } }, { "category": "product_version", "name": "zstd", "product": { "name": "zstd", "product_id": "zstd", "product_identification_helper": { "purl": "pkg:rpm/redhat/zstd" } } }, { "category": "product_version", "name": "zstd-debuginfo", "product": { "name": "zstd-debuginfo", "product_id": "zstd-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/zstd-debuginfo" } } }, { "category": "product_version", "name": "zstd-debugsource", "product": { "name": "zstd-debugsource", "product_id": "zstd-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/zstd-debugsource" } } }, { "category": "product_version", "name": "zstd", "product": { "name": "zstd", "product_id": "zstd.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/zstd?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ceph-base as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-base" }, "product_reference": "ceph-base", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-common as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-common" }, "product_reference": "ceph-common", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-fuse as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-fuse" }, "product_reference": "ceph-fuse", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-mds as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-mds" }, "product_reference": "ceph-mds", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-mgr as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-mgr" }, "product_reference": "ceph-mgr", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-mon as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-mon" }, "product_reference": "ceph-mon", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-osd as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-osd" }, "product_reference": "ceph-osd", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-radosgw as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-radosgw" }, "product_reference": "ceph-radosgw", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-selinux as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-selinux" }, "product_reference": "ceph-selinux", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph-test as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph-test" }, "product_reference": "ceph-test", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "ceph.src as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:ceph.src" }, "product_reference": "ceph.src", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "libcephfs-devel as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:libcephfs-devel" }, "product_reference": "libcephfs-devel", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "libcephfs2 as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:libcephfs2" }, "product_reference": "libcephfs2", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "librados-devel as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:librados-devel" }, "product_reference": "librados-devel", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "librados2 as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:librados2" }, "product_reference": "librados2", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "libradosstriper1 as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:libradosstriper1" }, "product_reference": "libradosstriper1", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "librbd-devel as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:librbd-devel" }, "product_reference": "librbd-devel", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "librbd1 as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:librbd1" }, "product_reference": "librbd1", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "librgw-devel as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:librgw-devel" }, "product_reference": "librgw-devel", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "librgw2 as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:librgw2" }, "product_reference": "librgw2", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libzstd" }, "product_reference": "libzstd", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libzstd" }, "product_reference": "libzstd", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libzstd" }, "product_reference": "libzstd", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libzstd" }, "product_reference": "libzstd", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libzstd" }, "product_reference": "libzstd", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libzstd" }, "product_reference": "libzstd", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libzstd" }, "product_reference": "libzstd", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libzstd-debuginfo" }, "product_reference": "libzstd-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libzstd-debuginfo" }, "product_reference": "libzstd-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libzstd-debuginfo" }, "product_reference": "libzstd-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libzstd-debuginfo" }, "product_reference": "libzstd-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libzstd-debuginfo" }, "product_reference": "libzstd-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libzstd-debuginfo" }, "product_reference": "libzstd-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libzstd-debuginfo" }, "product_reference": "libzstd-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-devel as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libzstd-devel" }, "product_reference": "libzstd-devel", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-static as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libzstd-static" }, "product_reference": "libzstd-static", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-static as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libzstd-static" }, "product_reference": "libzstd-static", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libzstd-static as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libzstd-static" }, "product_reference": "libzstd-static", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "python-cephfs as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:python-cephfs" }, "product_reference": "python-cephfs", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "python-rados as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:python-rados" }, "product_reference": "python-rados", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "python-rbd as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:python-rbd" }, "product_reference": "python-rbd", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "python-rgw as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:python-rgw" }, "product_reference": "python-rgw", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "rbd-mirror as a component of Red Hat Ceph Storage 3.3", "product_id": "ceph-3-default:rbd-mirror" }, "product_reference": "rbd-mirror", "relates_to_product_reference": "ceph-3-default" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:zstd" }, "product_reference": "zstd", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:zstd-debuginfo" }, "product_reference": "zstd-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:zstd-debuginfo" }, "product_reference": "zstd-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:zstd-debuginfo" }, "product_reference": "zstd-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:zstd-debuginfo" }, "product_reference": "zstd-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:zstd-debuginfo" }, "product_reference": "zstd-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:zstd-debuginfo" }, "product_reference": "zstd-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:zstd-debuginfo" }, "product_reference": "zstd-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debugsource as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:zstd-debugsource" }, "product_reference": "zstd-debugsource", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:zstd-debugsource" }, "product_reference": "zstd-debugsource", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:zstd-debugsource" }, "product_reference": "zstd-debugsource", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:zstd-debugsource" }, "product_reference": "zstd-debugsource", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:zstd-debugsource" }, "product_reference": "zstd-debugsource", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debugsource as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:zstd-debugsource" }, "product_reference": "zstd-debugsource", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:zstd-debugsource" }, "product_reference": "zstd-debugsource", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.16.z", "product_id": "openshift-4.16.z:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.16.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4.19:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.19" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.17", "product_id": "openshift-4.17:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.17" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.18", "product_id": "openshift-4.18:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.18" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat OpenStack Platform 16.1 (Train)", "product_id": "openstack-16.1-default:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openstack-16.1-default" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.12", "product_id": "openshift-4.12.z:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.15.z", "product_id": "openshift-4.15.z:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.15.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.14", "product_id": "openshift-4.14.z:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.14.z" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.20", "product_id": "openshift-4.20:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.20" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "zstd.src as a component of OpenShift Container Platform 4.13", "product_id": "openshift-4.13.z:zstd.src" }, "product_reference": "zstd.src", "relates_to_product_reference": "openshift-4.13.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-24031", "cwe": { "id": "CWE-281", "name": "Improper Preservation of Permissions" }, "discovery_date": "2021-03-03T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "ceph-3-default:ceph-test", "ceph-3-default:libcephfs-devel", "ceph-3-default:librados-devel", "ceph-3-default:librbd-devel", "ceph-3-default:librgw-devel", "rhel-8.10.z:libzstd", "rhel-8.10.z:libzstd-debuginfo", "rhel-8.10.z:libzstd-devel", "rhel-8.10.z:zstd", "rhel-8.10.z:zstd-debuginfo", "rhel-8.10.z:zstd-debugsource", "rhel-8.10.z:zstd.src", "rhel-8.2.0.z.aus:zstd", "rhel-8.2.0.z.aus:zstd.src", "rhel-8.4.0.z.eus:libzstd", "rhel-8.4.0.z.eus:libzstd-debuginfo", "rhel-8.4.0.z.eus:libzstd-devel", "rhel-8.4.0.z.eus:zstd", "rhel-8.4.0.z.eus:zstd-debuginfo", "rhel-8.4.0.z.eus:zstd-debugsource", "rhel-8.4.0.z.eus:zstd.src", "rhel-8.6.0.z.aus:libzstd", "rhel-8.6.0.z.aus:libzstd-debuginfo", "rhel-8.6.0.z.aus:libzstd-devel", "rhel-8.6.0.z.aus:zstd", "rhel-8.6.0.z.aus:zstd-debuginfo", "rhel-8.6.0.z.aus:zstd-debugsource", "rhel-8.6.0.z.aus:zstd.src", "rhel-8.8.0.z.eus:libzstd", "rhel-8.8.0.z.eus:libzstd-debuginfo", "rhel-8.8.0.z.eus:libzstd-devel", "rhel-8.8.0.z.eus:zstd", "rhel-8.8.0.z.eus:zstd-debuginfo", "rhel-8.8.0.z.eus:zstd-debugsource", "rhel-8.8.0.z.eus:zstd.src", "rhel-9.0.0.z.eus:libzstd-devel", "rhel-9.0.0.z.eus:zstd.src", "rhel-9.2.0.z.eus:libzstd", "rhel-9.2.0.z.eus:libzstd-debuginfo", "rhel-9.2.0.z.eus:libzstd-devel", "rhel-9.2.0.z.eus:libzstd-static", "rhel-9.2.0.z.eus:zstd", "rhel-9.2.0.z.eus:zstd-debuginfo", "rhel-9.2.0.z.eus:zstd-debugsource", "rhel-9.2.0.z.eus:zstd.src", "rhel-9.4.z.eus:libzstd", "rhel-9.4.z.eus:libzstd-debuginfo", "rhel-9.4.z.eus:libzstd-devel", "rhel-9.4.z.eus:libzstd-static", "rhel-9.4.z.eus:zstd", "rhel-9.4.z.eus:zstd-debuginfo", "rhel-9.4.z.eus:zstd-debugsource", "rhel-9.4.z.eus:zstd.src", "rhel-9.6.z.eus:libzstd", "rhel-9.6.z.eus:libzstd-debuginfo", "rhel-9.6.z.eus:libzstd-devel", "rhel-9.6.z.eus:libzstd-static", "rhel-9.6.z.eus:zstd", "rhel-9.6.z.eus:zstd-debuginfo", "rhel-9.6.z.eus:zstd-debugsource", "rhel-9.6.z.eus:zstd.src", "rhel-9.7.z:libzstd-devel", "rhel-9.7.z:zstd.src", "rhel-9.7:libzstd-devel", "rhel-9.7:zstd.src", "rhel-9.8:libzstd-devel", "rhel-9.8:zstd.src" ] } ], "notes": [ { "category": "other", "text": "In OpenShift Container Platform (OCP) the zstd package was delivered in OCP 4.3 which is already end of life.", "title": "Statement" }, { "category": "description", "text": "A flaw was found in zstd. While the final file mode is reflective of the input file, when compressing or uncompressing, the file can temporarily gain greater permissions than the input and potentially leading to security issues (especially if large files are being handled).", "title": "Vulnerability description" } ], "product_status": { "known_affected": [ "ceph-3-default:ceph-base", "ceph-3-default:ceph-common", "ceph-3-default:ceph-fuse", "ceph-3-default:ceph-mds", "ceph-3-default:ceph-mgr", "ceph-3-default:ceph-mon", "ceph-3-default:ceph-osd", "ceph-3-default:ceph-radosgw", "ceph-3-default:ceph-selinux", "ceph-3-default:ceph.src", "ceph-3-default:libcephfs2", "ceph-3-default:librados2", "ceph-3-default:libradosstriper1", "ceph-3-default:librbd1", "ceph-3-default:librgw2", "ceph-3-default:python-cephfs", "ceph-3-default:python-rados", "ceph-3-default:python-rbd", "ceph-3-default:python-rgw", "ceph-3-default:rbd-mirror", "openshift-4.12.z:zstd.src", "openshift-4.13.z:zstd.src", "openshift-4.14.z:zstd.src", "openshift-4.15.z:zstd.src", "openshift-4.16.z:zstd.src", "openshift-4.17:zstd.src", "openshift-4.18:zstd.src", "openshift-4.19:zstd.src", "openshift-4.20:zstd.src", "openstack-16.1-default:zstd.src" ], "known_not_affected": [ "ceph-3-default:ceph-test", "ceph-3-default:libcephfs-devel", "ceph-3-default:librados-devel", "ceph-3-default:librbd-devel", "ceph-3-default:librgw-devel", "rhel-8.10.z:libzstd", "rhel-8.10.z:libzstd-debuginfo", "rhel-8.10.z:libzstd-devel", "rhel-8.10.z:zstd", "rhel-8.10.z:zstd-debuginfo", "rhel-8.10.z:zstd-debugsource", "rhel-8.10.z:zstd.src", "rhel-8.2.0.z.aus:zstd", "rhel-8.2.0.z.aus:zstd.src", "rhel-8.4.0.z.eus:libzstd", "rhel-8.4.0.z.eus:libzstd-debuginfo", "rhel-8.4.0.z.eus:libzstd-devel", "rhel-8.4.0.z.eus:zstd", "rhel-8.4.0.z.eus:zstd-debuginfo", "rhel-8.4.0.z.eus:zstd-debugsource", "rhel-8.4.0.z.eus:zstd.src", "rhel-8.6.0.z.aus:libzstd", "rhel-8.6.0.z.aus:libzstd-debuginfo", "rhel-8.6.0.z.aus:libzstd-devel", "rhel-8.6.0.z.aus:zstd", "rhel-8.6.0.z.aus:zstd-debuginfo", "rhel-8.6.0.z.aus:zstd-debugsource", "rhel-8.6.0.z.aus:zstd.src", "rhel-8.8.0.z.eus:libzstd", "rhel-8.8.0.z.eus:libzstd-debuginfo", "rhel-8.8.0.z.eus:libzstd-devel", "rhel-8.8.0.z.eus:zstd", "rhel-8.8.0.z.eus:zstd-debuginfo", "rhel-8.8.0.z.eus:zstd-debugsource", "rhel-8.8.0.z.eus:zstd.src", "rhel-9.0.0.z.eus:libzstd-devel", "rhel-9.0.0.z.eus:zstd.src", "rhel-9.2.0.z.eus:libzstd", "rhel-9.2.0.z.eus:libzstd-debuginfo", "rhel-9.2.0.z.eus:libzstd-devel", "rhel-9.2.0.z.eus:libzstd-static", "rhel-9.2.0.z.eus:zstd", "rhel-9.2.0.z.eus:zstd-debuginfo", "rhel-9.2.0.z.eus:zstd-debugsource", "rhel-9.2.0.z.eus:zstd.src", "rhel-9.4.z.eus:libzstd", "rhel-9.4.z.eus:libzstd-debuginfo", "rhel-9.4.z.eus:libzstd-devel", "rhel-9.4.z.eus:libzstd-static", "rhel-9.4.z.eus:zstd", "rhel-9.4.z.eus:zstd-debuginfo", "rhel-9.4.z.eus:zstd-debugsource", "rhel-9.4.z.eus:zstd.src", "rhel-9.6.z.eus:libzstd", "rhel-9.6.z.eus:libzstd-debuginfo", "rhel-9.6.z.eus:libzstd-devel", "rhel-9.6.z.eus:libzstd-static", "rhel-9.6.z.eus:zstd", "rhel-9.6.z.eus:zstd-debuginfo", "rhel-9.6.z.eus:zstd-debugsource", "rhel-9.6.z.eus:zstd.src", "rhel-9.7.z:libzstd-devel", "rhel-9.7.z:zstd.src", "rhel-9.7:libzstd-devel", "rhel-9.7:zstd.src", "rhel-9.8:libzstd-devel", "rhel-9.8:zstd.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-24031" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24031" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24031" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "ceph-3-default:ceph-base", "ceph-3-default:ceph-common", "ceph-3-default:ceph-fuse", "ceph-3-default:ceph-mds", "ceph-3-default:ceph-mgr", "ceph-3-default:ceph-mon", "ceph-3-default:ceph-osd", "ceph-3-default:ceph-radosgw", "ceph-3-default:ceph-selinux", "ceph-3-default:ceph.src", "ceph-3-default:libcephfs2", "ceph-3-default:librados2", "ceph-3-default:libradosstriper1", "ceph-3-default:librbd1", "ceph-3-default:librgw2", "ceph-3-default:python-cephfs", "ceph-3-default:python-rados", "ceph-3-default:python-rbd", "ceph-3-default:python-rgw", "ceph-3-default:rbd-mirror", "openstack-16.1-default:zstd.src" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "openshift-4.12.z:zstd.src", "openshift-4.13.z:zstd.src", "openshift-4.14.z:zstd.src", "openshift-4.15.z:zstd.src", "openshift-4.16.z:zstd.src", "openshift-4.17:zstd.src", "openshift-4.18:zstd.src", "openshift-4.19:zstd.src", "openshift-4.20:zstd.src" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM" }, "products": [ "ceph-3-default:ceph-base", "ceph-3-default:ceph-common", "ceph-3-default:ceph-fuse", "ceph-3-default:ceph-mds", "ceph-3-default:ceph-mgr", "ceph-3-default:ceph-mon", "ceph-3-default:ceph-osd", "ceph-3-default:ceph-radosgw", "ceph-3-default:ceph-selinux", "ceph-3-default:ceph-test", "ceph-3-default:ceph.src", "ceph-3-default:libcephfs-devel", "ceph-3-default:libcephfs2", "ceph-3-default:librados-devel", "ceph-3-default:librados2", "ceph-3-default:libradosstriper1", "ceph-3-default:librbd-devel", "ceph-3-default:librbd1", "ceph-3-default:librgw-devel", "ceph-3-default:librgw2", "ceph-3-default:python-cephfs", "ceph-3-default:python-rados", "ceph-3-default:python-rbd", "ceph-3-default:python-rgw", "ceph-3-default:rbd-mirror", "openshift-4.12.z:zstd.src", "openshift-4.13.z:zstd.src", "openshift-4.14.z:zstd.src", "openshift-4.15.z:zstd.src", "openshift-4.16.z:zstd.src", "openshift-4.17:zstd.src", "openshift-4.18:zstd.src", "openshift-4.19:zstd.src", "openshift-4.20:zstd.src", "openstack-16.1-default:zstd.src", "rhel-8.10.z:libzstd", "rhel-8.10.z:libzstd-debuginfo", "rhel-8.10.z:libzstd-devel", "rhel-8.10.z:zstd", "rhel-8.10.z:zstd-debuginfo", "rhel-8.10.z:zstd-debugsource", "rhel-8.10.z:zstd.src", "rhel-8.2.0.z.aus:zstd", "rhel-8.2.0.z.aus:zstd.src", "rhel-8.4.0.z.eus:libzstd", "rhel-8.4.0.z.eus:libzstd-debuginfo", "rhel-8.4.0.z.eus:libzstd-devel", "rhel-8.4.0.z.eus:zstd", "rhel-8.4.0.z.eus:zstd-debuginfo", "rhel-8.4.0.z.eus:zstd-debugsource", "rhel-8.4.0.z.eus:zstd.src", "rhel-8.6.0.z.aus:libzstd", "rhel-8.6.0.z.aus:libzstd-debuginfo", "rhel-8.6.0.z.aus:libzstd-devel", "rhel-8.6.0.z.aus:zstd", "rhel-8.6.0.z.aus:zstd-debuginfo", "rhel-8.6.0.z.aus:zstd-debugsource", "rhel-8.6.0.z.aus:zstd.src", "rhel-8.8.0.z.eus:libzstd", "rhel-8.8.0.z.eus:libzstd-debuginfo", "rhel-8.8.0.z.eus:libzstd-devel", "rhel-8.8.0.z.eus:zstd", "rhel-8.8.0.z.eus:zstd-debuginfo", "rhel-8.8.0.z.eus:zstd-debugsource", "rhel-8.8.0.z.eus:zstd.src", "rhel-9.0.0.z.eus:libzstd-devel", "rhel-9.0.0.z.eus:zstd.src", "rhel-9.2.0.z.eus:libzstd", "rhel-9.2.0.z.eus:libzstd-debuginfo", "rhel-9.2.0.z.eus:libzstd-devel", "rhel-9.2.0.z.eus:libzstd-static", "rhel-9.2.0.z.eus:zstd", "rhel-9.2.0.z.eus:zstd-debuginfo", "rhel-9.2.0.z.eus:zstd-debugsource", "rhel-9.2.0.z.eus:zstd.src", "rhel-9.4.z.eus:libzstd", "rhel-9.4.z.eus:libzstd-debuginfo", "rhel-9.4.z.eus:libzstd-devel", "rhel-9.4.z.eus:libzstd-static", "rhel-9.4.z.eus:zstd", "rhel-9.4.z.eus:zstd-debuginfo", "rhel-9.4.z.eus:zstd-debugsource", "rhel-9.4.z.eus:zstd.src", "rhel-9.6.z.eus:libzstd", "rhel-9.6.z.eus:libzstd-debuginfo", "rhel-9.6.z.eus:libzstd-devel", "rhel-9.6.z.eus:libzstd-static", "rhel-9.6.z.eus:zstd", "rhel-9.6.z.eus:zstd-debuginfo", "rhel-9.6.z.eus:zstd-debugsource", "rhel-9.6.z.eus:zstd.src", "rhel-9.7.z:libzstd-devel", "rhel-9.7.z:zstd.src", "rhel-9.7:libzstd-devel", "rhel-9.7:zstd.src", "rhel-9.8:libzstd-devel", "rhel-9.8:zstd.src" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "ceph-3-default:ceph-base", "ceph-3-default:ceph-common", "ceph-3-default:ceph-fuse", "ceph-3-default:ceph-mds", "ceph-3-default:ceph-mgr", "ceph-3-default:ceph-mon", "ceph-3-default:ceph-osd", "ceph-3-default:ceph-radosgw", "ceph-3-default:ceph-selinux", "ceph-3-default:ceph-test", "ceph-3-default:ceph.src", "ceph-3-default:libcephfs-devel", "ceph-3-default:libcephfs2", "ceph-3-default:librados-devel", "ceph-3-default:librados2", "ceph-3-default:libradosstriper1", "ceph-3-default:librbd-devel", "ceph-3-default:librbd1", "ceph-3-default:librgw-devel", "ceph-3-default:librgw2", "ceph-3-default:python-cephfs", "ceph-3-default:python-rados", "ceph-3-default:python-rbd", "ceph-3-default:python-rgw", "ceph-3-default:rbd-mirror", "openshift-4.12.z:zstd.src", "openshift-4.13.z:zstd.src", "openshift-4.14.z:zstd.src", "openshift-4.15.z:zstd.src", "openshift-4.16.z:zstd.src", "openshift-4.17:zstd.src", "openshift-4.18:zstd.src", "openshift-4.19:zstd.src", "openshift-4.20:zstd.src", "openstack-16.1-default:zstd.src", "rhel-8.10.z:libzstd", "rhel-8.10.z:libzstd-debuginfo", "rhel-8.10.z:libzstd-devel", "rhel-8.10.z:zstd", "rhel-8.10.z:zstd-debuginfo", "rhel-8.10.z:zstd-debugsource", "rhel-8.10.z:zstd.src", "rhel-8.2.0.z.aus:zstd", "rhel-8.2.0.z.aus:zstd.src", "rhel-8.4.0.z.eus:libzstd", "rhel-8.4.0.z.eus:libzstd-debuginfo", "rhel-8.4.0.z.eus:libzstd-devel", "rhel-8.4.0.z.eus:zstd", "rhel-8.4.0.z.eus:zstd-debuginfo", "rhel-8.4.0.z.eus:zstd-debugsource", "rhel-8.4.0.z.eus:zstd.src", "rhel-8.6.0.z.aus:libzstd", "rhel-8.6.0.z.aus:libzstd-debuginfo", "rhel-8.6.0.z.aus:libzstd-devel", "rhel-8.6.0.z.aus:zstd", "rhel-8.6.0.z.aus:zstd-debuginfo", "rhel-8.6.0.z.aus:zstd-debugsource", "rhel-8.6.0.z.aus:zstd.src", "rhel-8.8.0.z.eus:libzstd", "rhel-8.8.0.z.eus:libzstd-debuginfo", "rhel-8.8.0.z.eus:libzstd-devel", "rhel-8.8.0.z.eus:zstd", "rhel-8.8.0.z.eus:zstd-debuginfo", "rhel-8.8.0.z.eus:zstd-debugsource", "rhel-8.8.0.z.eus:zstd.src", "rhel-9.0.0.z.eus:libzstd-devel", "rhel-9.0.0.z.eus:zstd.src", "rhel-9.2.0.z.eus:libzstd", "rhel-9.2.0.z.eus:libzstd-debuginfo", "rhel-9.2.0.z.eus:libzstd-devel", "rhel-9.2.0.z.eus:libzstd-static", "rhel-9.2.0.z.eus:zstd", "rhel-9.2.0.z.eus:zstd-debuginfo", "rhel-9.2.0.z.eus:zstd-debugsource", "rhel-9.2.0.z.eus:zstd.src", "rhel-9.4.z.eus:libzstd", "rhel-9.4.z.eus:libzstd-debuginfo", "rhel-9.4.z.eus:libzstd-devel", "rhel-9.4.z.eus:libzstd-static", "rhel-9.4.z.eus:zstd", "rhel-9.4.z.eus:zstd-debuginfo", "rhel-9.4.z.eus:zstd-debugsource", "rhel-9.4.z.eus:zstd.src", "rhel-9.6.z.eus:libzstd", "rhel-9.6.z.eus:libzstd-debuginfo", "rhel-9.6.z.eus:libzstd-devel", "rhel-9.6.z.eus:libzstd-static", "rhel-9.6.z.eus:zstd", "rhel-9.6.z.eus:zstd-debuginfo", "rhel-9.6.z.eus:zstd-debugsource", "rhel-9.6.z.eus:zstd.src", "rhel-9.7.z:libzstd-devel", "rhel-9.7.z:zstd.src", "rhel-9.7:libzstd-devel", "rhel-9.7:zstd.src", "rhel-9.8:libzstd-devel", "rhel-9.8:zstd.src" ] } ], "title": "adds read permissions to files while being compressed or uncompressed" } ] }