-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbgsym Architecture: mipsel Version: 1:4.3-12+deb10u1 Distribution: buster-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-aql-03) Changed-By: Thorsten Alteholz Description: squashfs-tools - Tool to create and append to squashfs filesystems Changes: squashfs-tools (1:4.3-12+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: 120ba732179bdcb4a15fe4b366282811fde63309 368216 squashfs-tools-dbgsym_4.3-12+deb10u1_mipsel.deb 399d5bc5995e51488a2e2962a52cd736882c4030 5693 squashfs-tools_4.3-12+deb10u1_mipsel-buildd.buildinfo dc70e69d08ecb0932b66c2b6d184cce7b86fd1ef 127716 squashfs-tools_4.3-12+deb10u1_mipsel.deb Checksums-Sha256: 062f0979cbd65d513f1eee888b63135e9c39168cd5e529618911dfe89f12ed50 368216 squashfs-tools-dbgsym_4.3-12+deb10u1_mipsel.deb df5056398cd79e64672eed68d729bdc71fc33b1240a2f88a962a726214f5434d 5693 squashfs-tools_4.3-12+deb10u1_mipsel-buildd.buildinfo 78cf5ef1bcb0c8c56669555e3c544dca77a69279d0f511a37801a0c28d89af16 127716 squashfs-tools_4.3-12+deb10u1_mipsel.deb Files: 057c2f582bcac17afa0c9178bff6efd9 368216 debug optional squashfs-tools-dbgsym_4.3-12+deb10u1_mipsel.deb c7050fd42497ed6ad85fe19345edf1a1 5693 kernel optional squashfs-tools_4.3-12+deb10u1_mipsel-buildd.buildinfo ca91666e8f624e08c42f2b00fa69cbb6 127716 kernel optional squashfs-tools_4.3-12+deb10u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6YhmUaQdOAULQQfkuEloAOY175IFAmEzGvgACgkQuEloAOY1 75JqGRAAgA9ixg6xmo0QhCtVWlY2DYcyiJYLhuSmzHd+nkac4IsakWHUgXpjYT3a xhBsNVF2PRlpbdTDzsyL2X2fF7QuzDptg4kPetbcWfjMk1xgh4x6Nm8An+WkUuMY LVWqnO12KCWaemTtlsAq+URBRdPwAi4QgMc+K/plabZf3CPuOPEW1CBMSbZiRXEZ w7oTR2evQ6YfyNSh59MpI5VvLvHAzxmtH2RjFCIKZj4yPUGS9J6hdmFe/k1+QirL cwxgF7muW5xano/lLuZ+YJg8qZPUrNGB+uYsQhZdvnm1O+S9dGfRiugd15BupMKC zTQcFVDa30ngnAyNBgCG8B4mHqEq72sKyW6JnQ45tPZqb8OIeYDbQ9prSSrAMq9z iy5/gqQ9JS9b/8uYYeTSCIjYYzGP5gX2q8UmOCjVz4nsbIA7P+75EYSyKJqAdFQF iJ0JMyf+GLnNViljVz3xsVuIhEKK2fXkHW26T7xWo6CErOD2cPZHdRedaGriguI3 8/IF7/hfR40ia+kW+FEAAgWu+wqqIstAly4+FhqvtqS02QxK2COgqiZAnD7UYaSv RKOIx6DJT+EtLZiOyI363jBhsjWF1ahbpOqlV60+i7fv/xbp28jpIalXAkm7uPRM xmbZJcHlQqRZmdtNlR2fnc5LsfN2xcP7Ato3stVnXN50QuqLQLY= =YNdl -----END PGP SIGNATURE-----