-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 Oct 2021 21:23:35 +0200 Source: squashfs-tools Architecture: source Version: 1:4.3-12+deb10u2 Distribution: buster-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 994262 Changes: squashfs-tools (1:4.3-12+deb10u2) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * unsquashfs: use squashfs_closedir() to delete directory * unsquashfs: dynamically allocate name * unsquashfs: use linked list to store directory names * Unsquashfs: additional write outside destination directory exploit fix (CVE-2021-41072) (Closes: #994262) * Unsquashfs: Add makefile entry for unsquash-12.o Checksums-Sha1: 0fb57861efebb6bbb175d1c1a837bb775ea5f0ab 2066 squashfs-tools_4.3-12+deb10u2.dsc b0073dc17e7f623c5f94fc6eebb0185c28484ebe 31820 squashfs-tools_4.3-12+deb10u2.debian.tar.xz Checksums-Sha256: 572499ea1b8a4c67eda36e791d3a20e72f014979232fdff71443de368abd0a42 2066 squashfs-tools_4.3-12+deb10u2.dsc 4b8f0c90987b54f5ae4d4ca8b7e2ad1ba68943b0f783714c10157dfead7cdbc3 31820 squashfs-tools_4.3-12+deb10u2.debian.tar.xz Files: ef7283b2a91d5d6a5855541566b7bd7a 2066 kernel optional squashfs-tools_4.3-12+deb10u2.dsc e399ce5394233dbdb91b6360b41a9c94 31820 kernel optional squashfs-tools_4.3-12+deb10u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmFnNXpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EmXkP+wV/CUN6rN/d+3e1x1Jc0HksottR5PaR GmI1E4Ah9KLVPeGSHXhfO0jyoJJEqe1yiS5cy5oqhthLggWDNa94hY4T4xZOqs6E mZchiBuXi67QtC1xdccU07I2sRHwCVv9Dy9XFpPr07N/Zen5iD3TO0H9t5K8MLOm qBLdKKHM2K1YWSsH5RqbLoY1TcCxlL/GKCIjwkOnaoeSDLR9WT6w7yt9F3KBd79a eEjsNaZAgsRf2OTv9/KjQjp/DGuxlj0Z5xKYRhx2ZBuKQXRoXhLQbMXL1D8br4Mg 9wc+HJMMBjvd/PPZgfvIi/CdfOYONAK7BiIOpshDm3vo5VQUjftadQjZaWRhEO4S klYDERrAP+BA25lnK6UJSN0Q1BCrUZxVfWu4uMwxD81YoFJ0/Dq/iZGPaPBeY02E fEFANBtuwXwytupyNhX06T9LKvTejU3gAz24O95FN7N1dYB+ki30Uze+rJhDWWPn 0l4DTaPG2hduOWQ0s+l4eTy9u0V1QMMlsDEP58qKVL4hiVDo6B+cCz/8wuLekaZZ GrMlRZp4om8i9H7keeYXWk2duJleXrgCBGK8Q/jjQkVpKnl1eK5TpowkdEg0AR4I m9B54nY2R+47R+Bq8gCKOcGu7EEl/70BcRanA+c1TpWYAx/Ju6X4Uz0swWm2X0Hv +CSXZoGfBJTu =EB6H -----END PGP SIGNATURE-----
