-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 Oct 2021 21:54:31 +0200 Source: squashfs-tools Architecture: source Version: 1:4.4-2+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 994262 Changes: squashfs-tools (1:4.4-2+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * unsquashfs: use squashfs_closedir() to delete directory * unsquashfs: dynamically allocate name * unsquashfs: use linked list to store directory names * Unsquashfs: additional write outside destination directory exploit fix (CVE-2021-41072) (Closes: #994262) * Unsquashfs: Add makefile entry for unsquash-12.o Checksums-Sha1: 2a844c12779e028abee324b6da508c6366b75bbf 2072 squashfs-tools_4.4-2+deb11u2.dsc 0173c50dd0b0c14e2977ddbb68d0fb60d2e617de 17844 squashfs-tools_4.4-2+deb11u2.debian.tar.xz Checksums-Sha256: d8c920cc2c14ff332d3cd603c5c4b44dbe04fe06d5bd931905f55feec3936a36 2072 squashfs-tools_4.4-2+deb11u2.dsc f56a4cae65c1b088bf35d7704d3eff2f96f5fc7afe0f2e887949e0a528837465 17844 squashfs-tools_4.4-2+deb11u2.debian.tar.xz Files: 5b15bda52fb71a4d5823d3ae3b6712d2 2072 kernel optional squashfs-tools_4.4-2+deb11u2.dsc a4de26ea38f6576450295ab1f20ad804 17844 kernel optional squashfs-tools_4.4-2+deb11u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmFnNSNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Eou8P/RjeM+l15XKgHfx/q3vvHWrKzdzyXprh x9ehZwinZZ/8mfQlOQOc4Qs8NS5ccyqOKqWL3sV268GdKASKJ01Gnmr8+Tb0gu2f VqeDVTwbm/R0+an+UT+W6qKUgEvuEo2bhMJ+MtUC9iSSMjE0CTj2vHBX6TiQWBQl Q0HzGc6NB6h2Tfl+Kmt+jgMFvXksknb6klLLjLLuJfo++xAyMnpovogw//WrlNuc pazp1829roKbxsnCQeIYgSfKa6LEmtKvPlsT1eYpvKx7+jm43XqeqA8Y0v/VJuIb fVUoKrWfXLzPA7Kx7HwnitWQOlFuZBAaRv1tHuOAq2LSm7EJnkQVhdpbkjuZ6xMx GsmnymX1jq6gXAAYF69C2LGvJXuqNCuQunvd93ziPyP/vaysovUCZn26jPyHA9Dv w8RfokXx3yzBJha9OxdSbhSD6gCY95pl/PW7jH8HK4Eaeg3Y5c03+0PfHiOIuQCz byqXS+hPNdjGDT8Aba9lrPvuIHkQUFR8I+Vdue77pI4utlEh64pOSllY52w+6y45 IEXaqW2SeQ2tS4Wt/BbocPG54mQstnWs1Adj4M5zsYquq4HrQh6Z1MrplwXmKm8k t+y4ljA98KEOD9nEFtS5120hzApW+RWIvnBu/Ab15kT4F/qyo2ERXgTS2kyxAGwf tITxESEgCy6/ =77/U -----END PGP SIGNATURE-----