-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 29 Aug 2021 19:03:02 +0200
Source: squashfs-tools
Binary: squashfs-tools squashfs-tools-dbgsym
Architecture: arm64
Version: 1:4.3-12+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
 squashfs-tools - Tool to create and append to squashfs filesystems
Changes:
 squashfs-tools (1:4.3-12+deb10u1) buster-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2021-40153
     unsquashfs unvalidated filepaths allow writing outside of destination.
Checksums-Sha1:
 bf0725d2dba6aa03342bbc7ca8ea3c4fe61ed0ba 370112 squashfs-tools-dbgsym_4.3-12+deb10u1_arm64.deb
 c9e98711035ebb7619c260600d8da51b823486f4 5801 squashfs-tools_4.3-12+deb10u1_arm64-buildd.buildinfo
 601cf4513264eabd56d2ed20f70f4c5850236519 120864 squashfs-tools_4.3-12+deb10u1_arm64.deb
Checksums-Sha256:
 e6fb66a8585d8dd88e03e646e6572779198c223ecb3bd672a8435bd466c994f9 370112 squashfs-tools-dbgsym_4.3-12+deb10u1_arm64.deb
 2d8ad45afcf5fc47dfed11abab6a9408878b9776599bbc62032f264e9bd1f140 5801 squashfs-tools_4.3-12+deb10u1_arm64-buildd.buildinfo
 b94b79a868dfb1748b40f6935c5141f0718cd56b75542cdf5d06b483d9bd0203 120864 squashfs-tools_4.3-12+deb10u1_arm64.deb
Files:
 2281a73e8701df752cefb909ed4e8c67 370112 debug optional squashfs-tools-dbgsym_4.3-12+deb10u1_arm64.deb
 5ac00c16bc8b649ff45025d1d6f50cf1 5801 kernel optional squashfs-tools_4.3-12+deb10u1_arm64-buildd.buildinfo
 ba3abcf8dfa699c0382b25e0ddccdb5e 120864 kernel optional squashfs-tools_4.3-12+deb10u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=u4yL
-----END PGP SIGNATURE-----