ELSA-2024-2396

ELSA-2024-2396 - squashfs-tools security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-05-02

Description

[4.4-10.git1]
- CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
rhbz#2007304 RHEL-7763

[4.4-9.git1]
- CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
rhbz#2000638

Related CVEs

CVE-2021-40153

CVE-2021-41072

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	squashfs-tools-4.4-10.git1.el9.src.rpm	49754c5ce9c2e0e3b45ca0faac6d3a57ec5500703f7dd756dc14d32163350d1c	-	ol9_aarch64_baseos_latest
	squashfs-tools-4.4-10.git1.el9.src.rpm	49754c5ce9c2e0e3b45ca0faac6d3a57ec5500703f7dd756dc14d32163350d1c	-	ol9_aarch64_u4_baseos_base
	squashfs-tools-4.4-10.git1.el9.src.rpm	49754c5ce9c2e0e3b45ca0faac6d3a57ec5500703f7dd756dc14d32163350d1c	-	ol9_aarch64_u5_baseos_base
	squashfs-tools-4.4-10.git1.el9.aarch64.rpm	5527ea862a6b3c68f561b6fcc9c9b91dda3aa1e2f1003559d433de09bdd65a23	-	ol9_aarch64_baseos_latest
	squashfs-tools-4.4-10.git1.el9.aarch64.rpm	5527ea862a6b3c68f561b6fcc9c9b91dda3aa1e2f1003559d433de09bdd65a23	-	ol9_aarch64_u4_baseos_base
	squashfs-tools-4.4-10.git1.el9.aarch64.rpm	5527ea862a6b3c68f561b6fcc9c9b91dda3aa1e2f1003559d433de09bdd65a23	-	ol9_aarch64_u5_baseos_base
Oracle Linux 9 (x86_64)	squashfs-tools-4.4-10.git1.el9.src.rpm	49754c5ce9c2e0e3b45ca0faac6d3a57ec5500703f7dd756dc14d32163350d1c	-	ol9_x86_64_baseos_latest
	squashfs-tools-4.4-10.git1.el9.src.rpm	49754c5ce9c2e0e3b45ca0faac6d3a57ec5500703f7dd756dc14d32163350d1c	-	ol9_x86_64_u4_baseos_base
	squashfs-tools-4.4-10.git1.el9.src.rpm	49754c5ce9c2e0e3b45ca0faac6d3a57ec5500703f7dd756dc14d32163350d1c	-	ol9_x86_64_u5_baseos_base
	squashfs-tools-4.4-10.git1.el9.x86_64.rpm	bb1b562991b76d0016771d28191cf42bc44465ef6fccd03b315abbf684808e06	-	ol9_x86_64_baseos_latest
	squashfs-tools-4.4-10.git1.el9.x86_64.rpm	bb1b562991b76d0016771d28191cf42bc44465ef6fccd03b315abbf684808e06	-	ol9_x86_64_u4_baseos_base
	squashfs-tools-4.4-10.git1.el9.x86_64.rpm	bb1b562991b76d0016771d28191cf42bc44465ef6fccd03b315abbf684808e06	-	ol9_x86_64_u5_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team