-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 06 Oct 2021 21:54:31 +0200
Source: squashfs-tools
Architecture: source
Version: 1:4.4-2+deb11u2
Distribution: bullseye-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <g...@debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Closes: 994262
Changes:
squashfs-tools (1:4.4-2+deb11u2) bullseye-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* unsquashfs: use squashfs_closedir() to delete directory
* unsquashfs: dynamically allocate name
* unsquashfs: use linked list to store directory names
* Unsquashfs: additional write outside destination directory exploit fix
(CVE-2021-41072) (Closes: #994262)
* Unsquashfs: Add makefile entry for unsquash-12.o
Checksums-Sha1:
2a844c12779e028abee324b6da508c6366b75bbf 2072 squashfs-tools_4.4-2+deb11u2.dsc
0173c50dd0b0c14e2977ddbb68d0fb60d2e617de 17844
squashfs-tools_4.4-2+deb11u2.debian.tar.xz
Checksums-Sha256:
d8c920cc2c14ff332d3cd603c5c4b44dbe04fe06d5bd931905f55feec3936a36 2072
squashfs-tools_4.4-2+deb11u2.dsc
f56a4cae65c1b088bf35d7704d3eff2f96f5fc7afe0f2e887949e0a528837465 17844
squashfs-tools_4.4-2+deb11u2.debian.tar.xz
Files:
5b15bda52fb71a4d5823d3ae3b6712d2 2072 kernel optional
squashfs-tools_4.4-2+deb11u2.dsc
a4de26ea38f6576450295ab1f20ad804 17844 kernel optional
squashfs-tools_4.4-2+deb11u2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=77/U
-----END PGP SIGNATURE-----
