firmware-mod-kit

Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. Extract a firmware image into its component parts User makes desired modification to the...

AlmaLinux 9.2 [TuxCare] Security Update: squashfs-tools (ALMALINUX9.2:CLSA-2025:1751888935)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751888935 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs...

Rocky Linux 8.8 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0309)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260309 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools Multiple Vulnerabilities (ciqsa-2026_0738)

The CentOS Linux 7.9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260738 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2021-40153, CVE-2021-41072. Tenab...

Rocky Linux 9 [CIQ] Security Update: squashfs-tools / squashfs-tools-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2396)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242396 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic link...

Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools (ciqsa-2026_1327)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261327 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: squashfs-tools / squashfs-tools-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3139)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243139 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic link...

Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0494)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260494 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0261)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260261 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766488019)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766488019 advisory. - In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports ...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766488019)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766488019 advisory. - In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a...

CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0739)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260739 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the...

EUVD-2026-89431

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

CentOS Linux 7 [TuxCare] Security Update: squashfs-tools (CENTOS7:CLSA-2026:1777544697)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777544697 advisory. - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the...

AZL-105723 CVE-2026-71973 affecting package qemu 10.1.0-1

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda Hardcoded TLS Private Key CNVD ID: CNVD-2026-25884 Vendor: Tenda Technology Co., Ltd. Product: NVR4H network video recorder hardware version CH3V2.1 Firmware: V27.5.58.6 Class: CWE-321 — Use of Hard-coded Cryptographic Key Overview The NVR4H firmware stores an ECDSA key pair ...

CVE-2025-47827

CVE-2025-47827 Prueba de concepto e informe de vulnerabilidad para CVE-2025-47827. Contenido Descripción Divulgación Impacto Detección Mitigación Binarios Prueba de concepto Recursos Descripción En IGEL OS anterior a v11, Secure Boot puede ser eludido porque el módulo igel-flash-driver verifica...

ROS-20260928-73-0039

The vulnerability of the squashfsread inode function in the SquashFS file system of Linux operating systems is related to the comparison of numerical ranges without any minimum checks. Exploiting this vulnerability could allow a attacker to cause a service failure...

BIT-RCLONE-2026-79775 rclone Archive Backend SquashFS Parser Denial of Service

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

PT-2026-99014

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...