-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Aug 2021 19:03:02 +0200 Source: squashfs-tools Binary: squashfs-tools squashfs-tools-dbgsym Architecture: s390x Version: 1:4.4-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Thorsten Alteholz Description: squashfs-tools - Tool to create and append to squashfs filesystems Changes: squashfs-tools (1:4.4-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-40153 unsquashfs unvalidated filepaths allow writing outside of destination. Checksums-Sha1: 03f7aea2ba6d6adf69c2f6b320f89576683b0e81 401664 squashfs-tools-dbgsym_4.4-2+deb11u1_s390x.deb 292e2665c2076582a9bc5e0ac4f72dd7b3f33170 5888 squashfs-tools_4.4-2+deb11u1_s390x-buildd.buildinfo 6c21a2e690ccbbed545dfde7a99812e315bd29d6 129436 squashfs-tools_4.4-2+deb11u1_s390x.deb Checksums-Sha256: 7f450413f53d3546c1762d230877b8cf7714e95fcbf059ce70c3511556968122 401664 squashfs-tools-dbgsym_4.4-2+deb11u1_s390x.deb 0ade0348c686cd6ad3f0427114348eb803f71a72ec627dc815e235d4ae77851c 5888 squashfs-tools_4.4-2+deb11u1_s390x-buildd.buildinfo 9bce46b5f392f2c546c42cb55ef1ff5e9abb9325429652fd9a5d56e4e0cd4273 129436 squashfs-tools_4.4-2+deb11u1_s390x.deb Files: b9d9ca0e9561388767c954c013fd3ca2 401664 debug optional squashfs-tools-dbgsym_4.4-2+deb11u1_s390x.deb 558ef13ec9d730ca13cf57966453fb12 5888 kernel optional squashfs-tools_4.4-2+deb11u1_s390x-buildd.buildinfo 9907992139f4c88e20f7deb70bf532e5 129436 kernel optional squashfs-tools_4.4-2+deb11u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEojOFpcHXAua7nE2yC6cttUtB7SYFAmEzGVcACgkQC6cttUtB 7SZfxxAAls3nQrOAQrrXt/sw2d7MUFded3WDyUiZyA2ji2PPJu+9EHHliI1epdA6 s61SGJ+6rjClsX+7nlJ+Dz5MMjhKThh1kFzUQ+0a374pHjQWJJRm+3xBcjsRrq1c DnrlR8rLR0k4bX7o807nQLhKrtzUrGRYHwUYoffj+zlyG0LawsXOUkLp7BUBBCUW yXQNC/VtRyl5Yj8wyaRYMUhjlJRUqdVR/vnSW2KI3xvZ9LuaIzH52IAeScA+cCxx vY07H/pewGvt1PU4pLvB0jwXgPM9bo6+OKJWO9mSSy3i7HMGrYoFGaPYprkdsCra /E9BJJStMUfDmRxW6XDmie044UT5F8WHXnye2bThwf/uF/DELFLM1UB1xM3TTcFu TEbM4ScFSqc5x6Xhcn2TmBLm8cbJEiBcQ3s36oD7M5yPMrAiSpya9XHceQO6L6or qM0XnJQtN4xTSvdKb4+GzW1bkggpEV3ilfpOqxLR0KViqKJbs9RnHkP7Cw3RXUAs 7Et29nAFgQyjYIbwC0tlgSiszDJwwLHHdSFAEynOTHKrUzOvxA6ALubCPJY1YN3f 8zyeWrBbd1ZOKQ4BS5sguKSEPIvph9V+yXyoq/GVgVdX0/KAJB90gZXmLqTHLlG6 0sgR1qDgBpR9jHaeCpeAZAty6SCnCDq8zAw4xDyEHZ+zx/cNfcI= =IO+D -----END PGP SIGNATURE-----