Summary
USN-5078-1 fixed a vulnerability in Squashfs-Tools. That update was
incomplete and could still result in Squashfs-Tools mishandling certain
malformed SQUASHFS files. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Richard Weinberger discovered that Squashfs-Tools mishandled certain
malformed SQUASHFS files. An attacker could use this vulnerability to
write arbitrary files to the filesystem.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | squashfs-tools | 1:4.4-1ubuntu0.3 |
Vulnerabilities 1
-
Unscored —
squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2…
References
-
report
https://ubuntu.com/security/CVE-2021-41072