[ubuntu/jammy-proposed] squashfs-tools 1:4.5-3 (Accepted)

Simon Quigley tsimonq2 at ubuntu.com
Wed Oct 27 07:27:23 UTC 2021


squashfs-tools (1:4.5-3) unstable; urgency=high

  * Backport patch to fixes:
    - use squashfs_closedir() to delete directory,
    - dynamically allocate unsquashfs name,
    - use linked list to store directory names.
  * Fix CVE-2021-41072: additional unsquashfs write outside destination
    directory exploit fix (closes: #994262).

Date: 2021-09-18 16:37:54.283460+00:00
Changed-By: Laszlo Boszormenyi <gcs at debian.org>
Signed-By: Simon Quigley <tsimonq2 at ubuntu.com>
https://launchpad.net/ubuntu/+source/squashfs-tools/1:4.5-3
-------------- next part --------------
Sorry, changesfile not available.


More information about the jammy-changes mailing list