-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 29 Aug 2021 19:03:02 +0200
Source: squashfs-tools
Binary: squashfs-tools squashfs-tools-dbgsym
Architecture: armhf
Version: 1:4.3-12+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: armhf / armel Build Daemon (hoiby) <buildd_armhf-hoiby@buildd.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
 squashfs-tools - Tool to create and append to squashfs filesystems
Changes:
 squashfs-tools (1:4.3-12+deb10u1) buster-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2021-40153
     unsquashfs unvalidated filepaths allow writing outside of destination.
Checksums-Sha1:
 b618e485eb9010249f2162448c4fa04b85c4fbda 367252 squashfs-tools-dbgsym_4.3-12+deb10u1_armhf.deb
 316759afaee170abfdcec9a6578887ae7961d9a0 5735 squashfs-tools_4.3-12+deb10u1_armhf-buildd.buildinfo
 c96e70adee4bee698a69677767a7bc4b959a7a6a 118124 squashfs-tools_4.3-12+deb10u1_armhf.deb
Checksums-Sha256:
 c80c7af40fffaf364793be504c423aa42d523c0c5c3db60c08ac0b5088a21f23 367252 squashfs-tools-dbgsym_4.3-12+deb10u1_armhf.deb
 037a14a3da34d1731ab3beb59b0ae244fbdcd6341267845cdc1d160c527eb48f 5735 squashfs-tools_4.3-12+deb10u1_armhf-buildd.buildinfo
 e09580db4fdb1c8e1f8cc325353a85f47c950070c7dadc991113e7da8eda1600 118124 squashfs-tools_4.3-12+deb10u1_armhf.deb
Files:
 0b9d0827b48b18591fb666390e28de56 367252 debug optional squashfs-tools-dbgsym_4.3-12+deb10u1_armhf.deb
 2995119e456ee17786b70c27b68b6046 5735 kernel optional squashfs-tools_4.3-12+deb10u1_armhf-buildd.buildinfo
 a11a75bf5af31dfc99314094c8c0bdbb 118124 kernel optional squashfs-tools_4.3-12+deb10u1_armhf.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXKbqG0HaSMJSbIp828NZPHfgpE0FAmEzGXoACgkQ28NZPHfg
pE1kUw//TmHrrBwYqCfnpJYt8wzTXtefJ/G5Kx+gWB391XZblGQvTy0y+Q8vRKcM
kFwQbWaVeSkXe7Q6NOwWuvhA+4dn5Z+hIoZQ4kK/iBCDzemkx3KVxot3HrtEuFTn
eFyTywFyNF4XOErK0Ead5VXYBlJ8L8/5hGLqvasZ6jYQkpaqNwF7lwZX5y9SqbT2
zdVWAjRkjup8XZ74l97TEQts3IiIij2qqpQEz2V38juVNkZmH6iE1a/F/g7bTpcc
nVfHURWi3lKkNTRm7hjZipoKo6kFiG5xgQpK8q1NvDsvW16t9NDMD5manWucx/yD
MJN7Sjsa32zI4jnzl0nQ26hy0+RVSuxRA20WbtgnDZNVLuSV5GhLiI9aocR1zHIR
jKjSTwX2uKbNYs+5PMVm5f7hKEjufwoo6wHTxQHjU8a3EXR8QL0Obqpa517XpBt/
U54L+Khn8y7YBsMKNX64GyjIYHe9FXzKjkPpDFyOLYqG5dFagxYTOT1AkTWE16vZ
UybpV+VXoZ60Bhqjhjy57W0DZhFhkt1Rp+NNQX3Ehxh1fBbNpcqDlFPFAkC+WVru
bWRU+f9WGELCIEDwYjfzDUE0xpKWakLTJOLJykkg62HUbANELJGpi3mjnvPq/DRA
g/ViNRYSBnBNuTj9LShPW9CCP1tIxSCFz32cfKkD/U5nRv/fvKo=
=Aq5Y
-----END PGP SIGNATURE-----