File _patchinfo of Package patchinfo.31329

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.31329

<patchinfo incident="31329">
  <issue tracker="cve" id="2015-4645"/>
  <issue tracker="cve" id="2021-41072"/>
  <issue tracker="cve" id="2015-4646"/>
  <issue tracker="cve" id="2021-40153"/>
  <issue tracker="bnc" id="1133284">LTO: squashfs build fails</issue>
  <issue tracker="bnc" id="1160294">squashfs fails with -fno-common</issue>
  <issue tracker="bnc" id="1190531">VUL-0: CVE-2021-41072: squashfs: unvalidated symlinks allow writing outside of destination</issue>
  <issue tracker="bnc" id="935380">VUL-1: CVE-2015-4645,CVE-2015-4646: squashfs: Multiple stack overflows in squashfs-tools</issue>
  <issue tracker="bnc" id="1189936">VUL-0: CVE-2021-40153: squashfs: unvalidated filepaths allow writing outside of destination</issue>
  <packager>duwe</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for squashfs</summary>
  <description>This update for squashfs fixes the following issues:

- CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs-tools (bsc#935380)
- CVE-2021-40153: Fixed an issue where an attacker might have been
  able to write a file outside of destination (bsc#1189936)
- CVE-2021-41072: Fixed an issue where an attacker might have been
  able to write a file outside the destination directory via a
  symlink (bsc#1190531).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.31329

Places