-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbg Architecture: source amd64 Version: 1:4.3-3+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: squashfs-tools - Tool to create and append to squashfs filesystems squashfs-tools-dbg - Tool to create and append to squashfs filesystems (debug) Changes: squashfs-tools (1:4.3-3+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: 3b0ce79e0bfef5dee79cda09105db6990717b198 2205 squashfs-tools_4.3-3+deb9u2.dsc a615979db9cee82e4a934a1455577f597d290b41 182550 squashfs-tools_4.3.orig.tar.gz 2e102cd82a4a163b1d233e597dbad37bf65d0f20 17488 squashfs-tools_4.3-3+deb9u2.debian.tar.xz 178cb944c88e2091c17b924c2601502b868503fd 319712 squashfs-tools-dbg_4.3-3+deb9u2_amd64.deb d8eb92791de30034cdcc95a1c6ba5a2d223bb0f6 6537 squashfs-tools_4.3-3+deb9u2_amd64.buildinfo 16605a5ed959c3504413a9c8e6b4d1d1424f06c5 123620 squashfs-tools_4.3-3+deb9u2_amd64.deb Checksums-Sha256: 35cc0c8be1848068ccbbe9a488dbfd0607d5b31300d3f9bfcf5b12075b09780b 2205 squashfs-tools_4.3-3+deb9u2.dsc 0d605512437b1eb800b4736791559295ee5f60177e102e4d4ccd0ee241a5f3f6 182550 squashfs-tools_4.3.orig.tar.gz 55ea7f6aa8ca2945ff3cb456870a83a4a146110fdf4d54b2b8acca403359b14f 17488 squashfs-tools_4.3-3+deb9u2.debian.tar.xz e6ea0c55a24882f3142a08ef999bacf075188df795855a6527c0daba19f0ffb7 319712 squashfs-tools-dbg_4.3-3+deb9u2_amd64.deb 4cad40d26344f7a15f02d698155f8bd3826dd7d1af56165e661dc4307ff60798 6537 squashfs-tools_4.3-3+deb9u2_amd64.buildinfo d41da9c9bfa4bf2495e10a0a6e7555c0366b5de4b9e9ff089addbfff5a160a84 123620 squashfs-tools_4.3-3+deb9u2_amd64.deb Files: 2003bdfb49a65498ab0d7d6a2b351272 2205 kernel optional squashfs-tools_4.3-3+deb9u2.dsc d92ab59aabf5173f2a59089531e30dbf 182550 kernel optional squashfs-tools_4.3.orig.tar.gz a0ad670e5dec3f16a030215d3d9cf7b7 17488 kernel optional squashfs-tools_4.3-3+deb9u2.debian.tar.xz 4bd4f9833816c47424007e7f29a45520 319712 debug extra squashfs-tools-dbg_4.3-3+deb9u2_amd64.deb d3dfc006864e58e7fa6c42b94734072e 6537 kernel optional squashfs-tools_4.3-3+deb9u2_amd64.buildinfo 472be7a79a1a04d1ef2d4f8ddcd5086b 123620 kernel optional squashfs-tools_4.3-3+deb9u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmEuN79fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR1rvD/4z0JyW7dD41gR2zvsxHzTIhz29/H1g CSVG+hwSmuU0J/2GQXXYzVGmBdSF2GRsXMbszIlSsiUrcmv4lg2yrI42FR3OlJ21 tlLDtsycl6GJVeeau1NGZ63IFowMe6iz/pFhZhgkkEc7Li/JwuoMexVCb1WyhcaS HyIA5VY9Jy38OGt37HZcAPNDB9TlfOR/X9QVeZso+HHVpDRqPbNI7o3g0EQEOr59 W899icJ1reTmO0QcOXz1NaQa2Dz5oHm0xMnIeQy/ABYGrEAUZYeOV1lfyGMvU2dH T92Jk/WYsH5kkwJsqeiSdsVyYcdwgxZA03vVhf0e1/8dm3SChDxNAl3FhQEmAF7z f3z2SERt09JsNcmOVmMWAsMzkEnb0NRCmyG1lBt3QmN/00KNB3RNDVlbR+cR2u3z aGLlYpuA9z+J/M5VZG/GITEzVwk0lWJGUz6REEvKEZJcxu6ZTuLCuOSUQXzVWKey P08sP9Mo2QhdbFD2J6iWH2dTTe7puIioEgGluRAwOcEqS19XdSpoQlUBt43YbbBC RtRAk5wB5A4IPlGVSDpXPNz+oi0ifKjWQ4VNnsTdhlnbAP1Q0dGMPA8u3V4qxzzt ALKcY5ienT33hq7+nPy+HtEhm8ASE69/BxiPz/K47ZPDLbwPNFMDEvI6t0WQAs+g Dvzu8U+5QhjLjg== =//O0 -----END PGP SIGNATURE-----