Lucene search

K
almalinuxAlmaLinuxALSA-2024:2396
HistoryApr 30, 2024 - 12:00 a.m.

Moderate: squashfs-tools security update

2024-04-3000:00:00
errata.almalinux.org
5
squashfs tools
security update
unvalidated file paths
directory traversal
cve-2021-40153
cve-2021-41072
linux
almalinux

7 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.2%

SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems.

Security Fix(es):

  • squashfs-tools: unvalidated filepaths allow writing outside of destination (CVE-2021-40153)
  • squashfs-tools: possible Directory Traversal via symbolic link (CVE-2021-41072)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.