• Accepted squashfs-tools 1:4.3-12+deb10u2 (source) into oldstable-propos

    From Debian FTP Masters@21:1/5 to All on Sat Oct 16 16:00:03 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Wed, 13 Oct 2021 21:23:35 +0200
    Source: squashfs-tools
    Architecture: source
    Version: 1:4.3-12+deb10u2
    Distribution: buster-security
    Urgency: high
    Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
    Changed-By: Salvatore Bonaccorso <carnil@debian.org>
    Closes: 994262
    Changes:
    squashfs-tools (1:4.3-12+deb10u2) buster-security; urgency=high
    .
    * Non-maintainer upload by the Security Team.
    * unsquashfs: use squashfs_closedir() to delete directory
    * unsquashfs: dynamically allocate name
    * unsquashfs: use linked list to store directory names
    * Unsquashfs: additional write outside destination directory exploit fix
    (CVE-2021-41072) (Closes: #994262)
    * Unsquashfs: Add makefile entry for unsquash-12.o
    Checksums-Sha1:
    0fb57861efebb6bbb175d1c1a837bb775ea5f0ab 2066 squashfs-tools_4.3-12+deb10u2.dsc
    b0073dc17e7f623c5f94fc6eebb0185c28484ebe 31820 squashfs-tools_4.3-12+deb10u2.debian.tar.xz
    Checksums-Sha256:
    572499ea1b8a4c67eda36e791d3a20e72f014979232fdff71443de368abd0a42 2066 squashfs-tools_4.3-12+deb10u2.dsc
    4b8f0c90987b54f5ae4d4ca8b7e2ad1ba68943b0f783714c10157dfead7cdbc3 31820 squashfs-tools_4.3-12+deb10u2.debian.tar.xz
    Files:
    ef7283b2a91d5d6a5855541566b7bd7a 2066 kernel optional squashfs-tools_4.3-12+deb10u2.dsc
    e399ce5394233dbdb91b6360b41a9c94 31820 kernel optional squashfs-tools_4.3-12+deb10u2.debian.tar.xz

    -----BEGIN PGP SIGNATURE-----

    iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmFnNXpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EmXkP+wV/CUN6rN/d+3e1x1Jc0HksottR5PaR GmI1E4Ah9KLVPeGSHXhfO0jyoJJEqe1yiS5cy5oqhthLggWDNa94hY4T4xZOqs6E mZchiBuXi67QtC1xdccU07I2sRHwCVv9Dy9XFpPr07N/Zen5iD3TO0H9t5K8MLOm qBLdKKHM2K1YWSsH5RqbLoY1TcCxlL/GKCIjwkOnaoeSDLR9WT6w7yt9F3KBd79a eEjsNaZAgsRf2OTv9/KjQjp/DGuxlj0Z5xKYRhx2ZBuKQXRoXhLQbMXL1D8br4Mg 9wc+HJMMBjvd/PPZgfvIi/CdfOYONAK7BiIOpshDm3vo5VQUjftadQjZaWRhEO4S klYDERrAP+BA25lnK6UJSN0Q1BCrUZxVfWu4uMwxD81YoFJ0/Dq/iZGPaPBeY02E fEFANBtuwXwytupyNhX06T9LKvTejU3gAz24O95FN7N1dYB+ki30Uze+rJhDWWPn 0l4DTaPG2hduOWQ0s+l4eTy9u0V1QMMlsDEP58qKVL4hiVDo6B+cCz/8wuLekaZZ GrMlRZp4om8i9H7keeYXWk2duJleXrgCBGK8Q/jjQkVpKnl1eK5TpowkdEg0AR4I m9B54nY2R+47R+Bq8gCKOcGu7EEl/70BcRanA+c1TpWYAx/Ju6X4Uz0swWm2X0Hv
    +CSXZoGfBJTu
    =EB6H
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)