-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbgsym Architecture: mipsel Version: 1:4.4-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-aql-03) Changed-By: Thorsten Alteholz Description: squashfs-tools - Tool to create and append to squashfs filesystems Changes: squashfs-tools (1:4.4-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: 73ac67bf0a4f6e62138de0bdffce5c4eff3eb87e 392728 squashfs-tools-dbgsym_4.4-2+deb11u1_mipsel.deb 42b2993745d0878ebf89900ac5f6b363c29dfcda 5787 squashfs-tools_4.4-2+deb11u1_mipsel-buildd.buildinfo a83758b745746f6fb2f03b0eca0d65cd4c52fe7b 137116 squashfs-tools_4.4-2+deb11u1_mipsel.deb Checksums-Sha256: 3133c03ac5f88bff410def0215eebc99f72519922c48991fe58e31deca65a187 392728 squashfs-tools-dbgsym_4.4-2+deb11u1_mipsel.deb b79547bd825f059132e60d250d053edfc25f7058784de405033b1964e3ee9c40 5787 squashfs-tools_4.4-2+deb11u1_mipsel-buildd.buildinfo 324184d00ec27193212c7d14d5b7f956c68ac7dc4b0b031bf1690fe094292690 137116 squashfs-tools_4.4-2+deb11u1_mipsel.deb Files: 7f7d5f2ceaa40af6db85c5960d457388 392728 debug optional squashfs-tools-dbgsym_4.4-2+deb11u1_mipsel.deb 8bdf15625f434679ea366b8f39ec2fb0 5787 kernel optional squashfs-tools_4.4-2+deb11u1_mipsel-buildd.buildinfo c30aaf9af304830c49b176d4ebcec991 137116 kernel optional squashfs-tools_4.4-2+deb11u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6YhmUaQdOAULQQfkuEloAOY175IFAmEzG+kACgkQuEloAOY1 75LLvQ//VM7EOT246kBJRhkJDROOz/5gxk3RvfmxZM4Z9gPVMlW7aKi4LcV99SnM zhJX5j+Nk7E9UI3GDc/V4JBk2m03eeccxQY7bknJtkT5Di4QY+dMVpwGTibsXV2c wwkc9ptEz5AfYWIAFJFsTkeN096XxWRAZBho07zitHr0ZO8lqEOhdAi4H8R1OTu8 47TbFuMNCEpv4l0gyaO8rIrcMgN0azGGJENegzu/E6TabRA9FIAqqoHrGc3gb+g/ WKn19uxtJWsOydrqOBE3/h5UV84x7Xo+VhCCR51YoHpu/yBXUtq0Ly3laTY4XF0U eig5ag78pqxwe5YJjqz+kNHXLjekllfccQTEQx/ypKVto1GhK5AmoI4E2dhTawKN tMWcdwsADX94nLHsXJI3Kj7MwRvSgZyY5o6hkhQNksMttuyn+93/4U/mBzlDRtDE cVKRV1Za4rAloAsOqyTjzC4COTuhZZLNIMvkkkwrKHl9cPzWHRu8N3G7N5oPRvle UctjRkiqGdcRf4Io7Pg5nrL9jQrGN3d8pDCqbbI66+4FnRM0NTG3alQp4iY580xq 5euB+eBesFMd2PMYi7ikUafFzSwitqXnIf0j8cr4FINCMZg8pGwBf45+O5//qXMH PDkUIGX83avPNIcX8UBXbf60eiAycIv1TS184GT8T9mTGXeQ69w= =Yfk9 -----END PGP SIGNATURE-----