-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbgsym Architecture: s390x Version: 1:4.3-12+deb10u1 Distribution: buster-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Thorsten Alteholz Description: squashfs-tools - Tool to create and append to squashfs filesystems Changes: squashfs-tools (1:4.3-12+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: e7f465fbfd7cc2ddcacbcc86af07ba6da92fc758 379200 squashfs-tools-dbgsym_4.3-12+deb10u1_s390x.deb 04bb5fc7deb8c137d294ccb0b017e43b87bbcc70 5769 squashfs-tools_4.3-12+deb10u1_s390x-buildd.buildinfo d0025f7f746162d48206d1b9d17f68e84fb5a553 121332 squashfs-tools_4.3-12+deb10u1_s390x.deb Checksums-Sha256: fe99320763dd31f7221880bc11a7b903dd8bea2dc4d12554dd9f186fbc7320eb 379200 squashfs-tools-dbgsym_4.3-12+deb10u1_s390x.deb 693e45a3473af71dbb1aa232133e3a57c09c0113e3f677edfde2f205652b8b01 5769 squashfs-tools_4.3-12+deb10u1_s390x-buildd.buildinfo 8811bfc25ebb6d00c626d29893198dfaa1884edbd07a9716e76e0e5066e932fb 121332 squashfs-tools_4.3-12+deb10u1_s390x.deb Files: b69bede789c0e2493f412d3c63052ab8 379200 debug optional squashfs-tools-dbgsym_4.3-12+deb10u1_s390x.deb 6568292f39d99698f4dbcbb1f2047fad 5769 kernel optional squashfs-tools_4.3-12+deb10u1_s390x-buildd.buildinfo 264bde3a794fd904ab2914154f0e8459 121332 kernel optional squashfs-tools_4.3-12+deb10u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEojOFpcHXAua7nE2yC6cttUtB7SYFAmEzGToACgkQC6cttUtB 7SahFg/8CmqpDuurmaMv9G4bucpYvZ4x09kbgbJIwTupuemsv3m6ZOqiuxYhJGZd kkJrlrucCwYU5exPuSDnoULPLdSsdFScXvaNQk7Ez2eU70rvf7SihdFaHUGgqkwL Jg7SQHJGcczoc85yQbskK/g1+VZueb7cTc2tUoowwfBRIhmsBoA2gdBl2+D6HtGA 0MWCSannlI8t6Nfd8bRVnoT7SzjY5IdgBzf7VnOeSlhmQwZv1r6zTIIrbHsmFik+ lHvyJTzdhASz7K2D+cJN+T2RRGiBhlb7c2DKdZUpZ1APN7J6AO5H1IljF2JJC0l4 TB5vqyJr0YEjCyUnrjbthyaMFpA2rRsu+FmwUaSyzHH5ov5Vj2bGRAI7JG4iqUkd l9wdlJDXB0mcdzg2uBezg4bEgtP2FYl59UOxExfgggklzi+roa4jH/5DeNcqkfZ4 gyb+Y7S/erdAiebHT1iNC+E+VvSKu+1On4mdDbgPgH8U8CcGfILTJ655OFV9X2xY rKMGaK6StPe+CoFTZi+wdzvGoPIkLKxkaV5KzDZiUaZhL3OiMEVEqyW8r6zZ6Clp l8oKyx8LNE8RCL4WlTyGF75/D3IHS3tOdV+vhIrfiKeszGoZhiAMVMheX0tEn1Tl V3UgnNz50Njm/Y9u0SUpa+VAf0/ti1zsgyvHVq3nd9vUaUQhieA= =OWo1 -----END PGP SIGNATURE-----