-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbgsym Architecture: armhf Version: 1:4.4-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: arm Build Daemon (arm-arm-01) Changed-By: Thorsten Alteholz Description: squashfs-tools - Tool to create and append to squashfs filesystems Changes: squashfs-tools (1:4.4-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: 7f7e51e52331327914169f1677c9b1947ab13846 388860 squashfs-tools-dbgsym_4.4-2+deb11u1_armhf.deb c1a501a80d2fb3610fbf0c4b9076ef8785d2ddd0 5831 squashfs-tools_4.4-2+deb11u1_armhf-buildd.buildinfo 3abad3dab652581eaf9e7143e7637c2f7e6b298b 126108 squashfs-tools_4.4-2+deb11u1_armhf.deb Checksums-Sha256: 04f55b7e4ee210a922c104608ecb5ffa4e1984fa128c60a907a26b31fc347b0a 388860 squashfs-tools-dbgsym_4.4-2+deb11u1_armhf.deb 55074cacc1013f4328130ca99586e88420aaa90ca1a602b34e1a9372e8b2206f 5831 squashfs-tools_4.4-2+deb11u1_armhf-buildd.buildinfo 8284ed5da37c25dc1a73fe744e66e768da840ab5a572472910dcf104b1a6c363 126108 squashfs-tools_4.4-2+deb11u1_armhf.deb Files: c864da3ff1d447835b1620cc3f3169bf 388860 debug optional squashfs-tools-dbgsym_4.4-2+deb11u1_armhf.deb f86c37bdea98d7403fc758e56080994b 5831 kernel optional squashfs-tools_4.4-2+deb11u1_armhf-buildd.buildinfo 51f6f4af51ef5fd8a43eb2d54ef3b623 126108 kernel optional squashfs-tools_4.4-2+deb11u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOrosGNnYCm3/302DbdsJ0BtdQQEFAmEzGbAACgkQbdsJ0Btd QQEMQQ//fTAmPQk3T8xdXNlBHmKvzgtFSoE1lCWNpd9HTQFgxhsc40BKkKIld+Cr Kv+HzQ3wU8Ow8I/5ykicZnRDk8ZOMYjhPEB+43SWI+4ofgRUa8FpWHirFMd7GedJ PtyRBsRG20NWBZki8jTcIN75hoUX8EUeipfVn40yX+w1LfN4a/lnBhiVa8fJUIps lDXJTYo2EzGcp6xUNDV4lXMktaHznmhf6MyNPmI72UZSpIucAe508tVmWhrGvrhg iahn6NEF8TbZC0hy8uvtipw4P9eMsCyxCZBUT0CTdXrHhxxVm8uN1+DrabkTNsri E9ycGN3faiilPkQ5E/zQuwkZm1uQqQJVe1X3yaxtOLtxTsXDOEpaLT8UNJ8kyBrh MZHKvTjcmX8dNkWyiVk+PQcjrZXZIZnXkPrNDepjCoeuKqb/bTUTpRlW5aDrVdVC hML35OscoJ+AxJGhdfjS9GR6f1FUgaq4N655WcMAemVJOjkn+vYI40HqIK1w11KR t+VX1+dLDFLjDR/HxZ0V0dast+A3hXRWDgkTYIk0a41QLK3VZiqK4xhVsG3S1ylH 75AW+JNY/VVafggIHvbga+BgW1VQOJOPmUv5Rcht7xDE1GlcQAvQg9aJwKVhB/wz +DxIXwxvJW1trozFFDqH3pKCb/BHzqdsvoLj2l7mpS2AucPwew4= =SrBt -----END PGP SIGNATURE-----