-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbgsym Architecture: arm64 Version: 1:4.4-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Thorsten Alteholz Description: squashfs-tools - Tool to create and append to squashfs filesystems Changes: squashfs-tools (1:4.4-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: f961d2010e02e54878e3d63c5709ca70982a24e0 391576 squashfs-tools-dbgsym_4.4-2+deb11u1_arm64.deb 2764fdde4a3b8bef0082e065837308da6564222e 5900 squashfs-tools_4.4-2+deb11u1_arm64-buildd.buildinfo 4d4497c48b0eda3b0363a4ee56297172328c13c8 128140 squashfs-tools_4.4-2+deb11u1_arm64.deb Checksums-Sha256: 9062c05a62905f24a2cf4da495b00ea87c47a1dc1e1661eccc0f7970ef8f9e2e 391576 squashfs-tools-dbgsym_4.4-2+deb11u1_arm64.deb 12ab7d159a8f5224e724377f7ccb7cf729ee1fb12977fe84fffb8ff9b3c43667 5900 squashfs-tools_4.4-2+deb11u1_arm64-buildd.buildinfo aaaee1a1229fcfe24695e6808d8a56f843d4c23bbf9175df193da294a8d828b2 128140 squashfs-tools_4.4-2+deb11u1_arm64.deb Files: f10f1f231351cf200dd271c5dba29139 391576 debug optional squashfs-tools-dbgsym_4.4-2+deb11u1_arm64.deb a515da6ad71a7056cd52adac54ba9b8b 5900 kernel optional squashfs-tools_4.4-2+deb11u1_arm64-buildd.buildinfo 8aabf833fe02edc37e55d2fc3e87e18c 128140 kernel optional squashfs-tools_4.4-2+deb11u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc2cgFYxhp20u3o8+v4mxSX2cjm4FAmEzGZkACgkQv4mxSX2c jm4cHxAA22omChN+o5Yr3/xklTQrDUPOtDj2MdNx9vwMoRIkeg2i+JSl83Ki8rBI Rt0gnXr3YsCvbtrjnjjCfy4ExaryTAyop7YjYf8reYsVl/dLMKzqlt3cKdiE4Mzx rd1LUHratnMY9MV7sZBovXzDVjzazqU3JghvEemndFB7utI53RXk1VdQ7UbTuKsJ BW0630gkgnRwcjoI7DV7VlIAlXg1viL2MeXSExEcqW7WxPO6IwJU9GUqUR5sqbc7 LOndZ8AAhJufkrYci264iI/3iAfvDQOmil9INS7TX2hQufvzvj2kHleWz24gVaXP ZIjDHriuBmFcGkI6eZWoVdVMWrhkQ19UtW/noG5oOp29HJHv1ffH/9ThYkB6HhDB LMXDymFdFbQxdB9HRhIXw0foL/ASmqPv2emjZFVWJCgag8IGbsSYQEQ5WdgKu+Jw 0IC7RG3l2Oha4/IRzamEJLDwEW1AXuZ2zKz7d6JgoNiDswhSWEEEle641VTdkojC a7ojCYYqB4Vhc718pIrrv5caeYNcf7/ccu31ONguXYEvabFV+NGJFE5Al+JrtHlo natkNIsBErGHtbuzuFwZzO9Pbhy7zh3BApM/hMye2sM/sZBoQKrjWvRuqOCIGjPx 7BYr2w+f+AG0Juecs6UycBCPMPJDTpuuy17yCI3uY1JyQyeFVXw= =zHQ3 -----END PGP SIGNATURE-----