Red Hat Security Advisory: squashfs-tools security update

Fixed packages 3

Vulnerabilities 2

• Unscored —
  CVE-2021-40153

  squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by…

  squashfs-tools squashfs-tools squashfs-tools squashfs-tools Debian Ubuntu Azure Linux Alpine
  Aug 27, 2021
• Unscored —
  CVE-2021-41072

  squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2…

  squashfs-tools squashfs-tools squashfs-tools squashfs-tools Debian Ubuntu Azure Linux Alpine
  Sep 14, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1998621
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2004957
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3139.json
• report
  https://access.redhat.com/security/cve/CVE-2021-40153
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-40153
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-40153
• report
  https://access.redhat.com/security/cve/CVE-2021-41072
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41072
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41072