Accepted squashfs-tools 1:4.3-3+deb9u2 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 29 Aug 2021 19:03:02 +0200
Source: squashfs-tools
Binary: squashfs-tools squashfs-tools-dbg
Architecture: source amd64
Version: 1:4.3-3+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
squashfs-tools - Tool to create and append to squashfs filesystems
squashfs-tools-dbg - Tool to create and append to squashfs filesystems (debug)
Changes:
squashfs-tools (1:4.3-3+deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2021-40153
unsquashfs unvalidated filepaths allow writing outside of destination.
Checksums-Sha1:
3b0ce79e0bfef5dee79cda09105db6990717b198 2205 squashfs-tools_4.3-3+deb9u2.dsc
a615979db9cee82e4a934a1455577f597d290b41 182550 squashfs-tools_4.3.orig.tar.gz
2e102cd82a4a163b1d233e597dbad37bf65d0f20 17488 squashfs-tools_4.3-3+deb9u2.debian.tar.xz
178cb944c88e2091c17b924c2601502b868503fd 319712 squashfs-tools-dbg_4.3-3+deb9u2_amd64.deb
d8eb92791de30034cdcc95a1c6ba5a2d223bb0f6 6537 squashfs-tools_4.3-3+deb9u2_amd64.buildinfo
16605a5ed959c3504413a9c8e6b4d1d1424f06c5 123620 squashfs-tools_4.3-3+deb9u2_amd64.deb
Checksums-Sha256:
35cc0c8be1848068ccbbe9a488dbfd0607d5b31300d3f9bfcf5b12075b09780b 2205 squashfs-tools_4.3-3+deb9u2.dsc
0d605512437b1eb800b4736791559295ee5f60177e102e4d4ccd0ee241a5f3f6 182550 squashfs-tools_4.3.orig.tar.gz
55ea7f6aa8ca2945ff3cb456870a83a4a146110fdf4d54b2b8acca403359b14f 17488 squashfs-tools_4.3-3+deb9u2.debian.tar.xz
e6ea0c55a24882f3142a08ef999bacf075188df795855a6527c0daba19f0ffb7 319712 squashfs-tools-dbg_4.3-3+deb9u2_amd64.deb
4cad40d26344f7a15f02d698155f8bd3826dd7d1af56165e661dc4307ff60798 6537 squashfs-tools_4.3-3+deb9u2_amd64.buildinfo
d41da9c9bfa4bf2495e10a0a6e7555c0366b5de4b9e9ff089addbfff5a160a84 123620 squashfs-tools_4.3-3+deb9u2_amd64.deb
Files:
2003bdfb49a65498ab0d7d6a2b351272 2205 kernel optional squashfs-tools_4.3-3+deb9u2.dsc
d92ab59aabf5173f2a59089531e30dbf 182550 kernel optional squashfs-tools_4.3.orig.tar.gz
a0ad670e5dec3f16a030215d3d9cf7b7 17488 kernel optional squashfs-tools_4.3-3+deb9u2.debian.tar.xz
4bd4f9833816c47424007e7f29a45520 319712 debug extra squashfs-tools-dbg_4.3-3+deb9u2_amd64.deb
d3dfc006864e58e7fa6c42b94734072e 6537 kernel optional squashfs-tools_4.3-3+deb9u2_amd64.buildinfo
472be7a79a1a04d1ef2d4f8ddcd5086b 123620 kernel optional squashfs-tools_4.3-3+deb9u2_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmEuN79fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR1rvD/4z0JyW7dD41gR2zvsxHzTIhz29/H1g
CSVG+hwSmuU0J/2GQXXYzVGmBdSF2GRsXMbszIlSsiUrcmv4lg2yrI42FR3OlJ21
tlLDtsycl6GJVeeau1NGZ63IFowMe6iz/pFhZhgkkEc7Li/JwuoMexVCb1WyhcaS
HyIA5VY9Jy38OGt37HZcAPNDB9TlfOR/X9QVeZso+HHVpDRqPbNI7o3g0EQEOr59
W899icJ1reTmO0QcOXz1NaQa2Dz5oHm0xMnIeQy/ABYGrEAUZYeOV1lfyGMvU2dH
T92Jk/WYsH5kkwJsqeiSdsVyYcdwgxZA03vVhf0e1/8dm3SChDxNAl3FhQEmAF7z
f3z2SERt09JsNcmOVmMWAsMzkEnb0NRCmyG1lBt3QmN/00KNB3RNDVlbR+cR2u3z
aGLlYpuA9z+J/M5VZG/GITEzVwk0lWJGUz6REEvKEZJcxu6ZTuLCuOSUQXzVWKey
P08sP9Mo2QhdbFD2J6iWH2dTTe7puIioEgGluRAwOcEqS19XdSpoQlUBt43YbbBC
RtRAk5wB5A4IPlGVSDpXPNz+oi0ifKjWQ4VNnsTdhlnbAP1Q0dGMPA8u3V4qxzzt
ALKcY5ienT33hq7+nPy+HtEhm8ASE69/BxiPz/K47ZPDLbwPNFMDEvI6t0WQAs+g
Dvzu8U+5QhjLjg==
=//O0
-----END PGP SIGNATURE-----