-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbgsym Architecture: armel Version: 1:4.3-12+deb10u1 Distribution: buster-security Urgency: high Maintainer: armhf / armel Build Daemon (hoiby) Changed-By: Thorsten Alteholz Description: squashfs-tools - Tool to create and append to squashfs filesystems Changes: squashfs-tools (1:4.3-12+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: 6fd6898827f910d70ff88751d650579ade4511fe 362400 squashfs-tools-dbgsym_4.3-12+deb10u1_armel.deb b0819a1fc00f10fb1f07a5cf2e9e2a7cca6a3923 5733 squashfs-tools_4.3-12+deb10u1_armel-buildd.buildinfo 3784e7ca914accf49936d9b8d33ee0d31311c104 116712 squashfs-tools_4.3-12+deb10u1_armel.deb Checksums-Sha256: 674bf9522311a86f1816bbbea3c4fa119cd790c0e0594c6ad4d949db9c550a3a 362400 squashfs-tools-dbgsym_4.3-12+deb10u1_armel.deb 43106239a2a31df64380f4be10cf443bf5f7782939c511791b04d1e93e371d25 5733 squashfs-tools_4.3-12+deb10u1_armel-buildd.buildinfo 985d32c0e50998504de25513ec53596c751241e4864eb3806321c8a8eb310195 116712 squashfs-tools_4.3-12+deb10u1_armel.deb Files: 239bc2ffb6dd0edc119161ff4ca143b5 362400 debug optional squashfs-tools-dbgsym_4.3-12+deb10u1_armel.deb d8bc06994fc201f8c5b80bf17f84f00e 5733 kernel optional squashfs-tools_4.3-12+deb10u1_armel-buildd.buildinfo c88c50d008f5110762fdc608acd4e434 116712 kernel optional squashfs-tools_4.3-12+deb10u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXKbqG0HaSMJSbIp828NZPHfgpE0FAmEzGfoACgkQ28NZPHfg pE340Q/9FeNRfox9VLXvwl0QkALm7Y86cVVPW3+HFx6fPOYRfz5yjWzQiTX7HWyE gp0uLHEXZ4bbFwv9E1U/RXbYZEJUmQLQl9gwtNJmHOoYrPw6sqAwfx3bXwRctG/q kGF80LYZokjkTsOkKKdG1rNckLPCcbNiyZvn+Q4XU2A2pXQ/aEUDrNPFo6yfm97Q 1B3Pr11G0Vp3jXWSM05RXszeACnnlm1wskRBtB8u633b6AgZSgY9OWhOfuwo5o4X lGRuQ6/W81h0VtMXcfybRCpNsjKz5fRzF1Hb7tYkb7FTBLLfVYdDFY7nJORYyiOT R2PPJimdTbx0S8mAXzbPOeMEribzTesjMiTU/bR/2REUl3+gKQjshus62nQEOp3i AOEqQOJ6nqrKedJwIiPAkofncYGgFvyF6GxFdRjkrr1sL24Hvu9B/viW5Y3P3tjN qQp6W0w0rgbmEFPziG+mk6rBTHMyRmr0sZl6hxSmi3avoCeW1oV+t4Rp3HZZPxip vz8xjlSCUsyJiLc86jNiupV1PRWmNZA4Aygp5DPoHwr4ESQY7fKCe2a8rN3zLCTh 6KI+Umo3MWBu8SDhOtyN/A1GIdqKjcZZoYGgD12eTeAw1Ku0qrdwHQpWIG4qUDyC R3aN6bNwzcPseB5lgJc+oBTkTXu/jmj6vc/P9wiZFjuho/w2FAA= =k95+ -----END PGP SIGNATURE-----