Summary
USN-5078-1 fixed several vulnerabilities in Squashfs-Tools.
This update provides the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Etienne Stalmans discovered that Squashfs-Tools mishandled certain
malformed SQUASHFS files. An attacker could use this vulnerability
to write arbitrary files to the filesystem. (CVE-2021-40153)
Richard Weinberger discovered that Squashfs-Tools mishandled certain
malformed SQUASHFS files. An attacker could use this vulnerability to
write arbitrary files to the filesystem. (CVE-2021-41072)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | squashfs-tools | 1:4.3-3ubuntu2.16.04.3+esm1 |
Vulnerabilities 2
-
Unscored —
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by…
-
Unscored —
squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2…