Ubuntu
squashfs-tools package

squashfs-tools 1:4.3-6ubuntu0.18.04.4 source package in Ubuntu

Changelog

squashfs-tools (1:4.3-6ubuntu0.18.04.4) bionic-security; urgency=medium

  * SECURITY UPDATE: Directory traversal via symlinks in unsquashfs
    - debian/patches/0014-CVE-2021-41072-1.patch: Use
      unsquashfs_closedir() when deleting directories in unsquash-N.c
    - debian/patches/0015-CVE-2021-41072-2.patch: Dynamically allocate
      structure names in unsquash-N.c
    - debian/patches/0016-CVE-2021-41072-3.patch: Store directory names in
      a linked list to allow sorting in unsquash-N.c
    - debian/patches/0017-CVE-2021-41072-4.patch: Sort directory entries in
      squashfs images and treat duplicate directory entries with the same
      name as invalid in unsquash-N.c
    - debian/patches/0018-CVE-2021-41072-5.patch: Fixup Makefile entry for
      unsquash-12.o
    - CVE-2021-41072

 -- Alex Murray <email address hidden>  Tue, 14 Sep 2021 18:13:17 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
linux-any kfreebsd-any
Section:
kernel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main kernel
Bionic security main kernel

Downloads

File Size SHA-256 Checksum
squashfs-tools_4.3.orig.tar.gz 178.3 KiB 0d605512437b1eb800b4736791559295ee5f60177e102e4d4ccd0ee241a5f3f6
squashfs-tools_4.3-6ubuntu0.18.04.4.debian.tar.xz 25.0 KiB 4eb0b29de384ea37f1b7912ce9b6c71903205b6ca246f61e28595cc876a2adde
squashfs-tools_4.3-6ubuntu0.18.04.4.dsc 1.7 KiB 16ebe8fb6d3e9fa3df8b2b3c4e96589d080c08798071de607d5e35dc0627d81b

View changes file

Binary packages built by this source

squashfs-tools: Tool to create and append to squashfs filesystems

 Squashfs is a highly compressed read-only filesystem for Linux. It uses zlib
 compression to compress both files, inodes and directories. Inodes in the
 system are very small and all blocks are packed to minimise data overhead.
 Block sizes greater than 4K are supported up to a maximum of 64K.
 .
 Squashfs is intended for general read-only filesystem use, for archival use
 (i.e. in cases where a .tar.gz file may be used), and in constrained block
 device/memory systems (e.g. embedded systems) where low overhead is needed.

squashfs-tools-dbgsym: debug symbols for squashfs-tools