212 matches found
Astra Linux – Vulnerability in squashfs-tools
The squashfsopendir function in unsquash-2.c within Squashfs-Tools 4.5 enables Directory Traversal, another vulnerability distinct from CVE-2021-40153. A squashfs filesystem that includes a symbolic link, along with files under the same filename, can cause unsquashfs to first create the symbolic...
Astra Linux – Vulnerability in squashfs-tools
In Squashfs-Tools 4.5, the squashfsopendir variable in unsquash-1.c stores the filename within the directory entry. This filename is then used by unsquashfs to create the new file during the unsquash process. The filename is not validated for traversal outside of the destination directory, allowi...
Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools Multiple Vulnerabilities (ciqsa-2026_0494)
The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260494 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2021-41072, CVE-2012-4024, CVE-2012-4025...
Rocky Linux 8.6 [CIQ] Security Update: squashfs-tools Multiple Vulnerabilities (ciqsa-2026_0261)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260261 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2021-41072, CVE-2012-4024, CVE-2012-4025...
CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0739)
The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260739 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the...
Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools (ciqsa-2026_1327)
The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261327 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the preceding...
Rocky Linux 9 [CIQ] Security Update: squashfs-tools / squashfs-tools-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2396)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242396 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic link...
CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools Multiple Vulnerabilities (ciqsa-2026_0738)
The CentOS Linux 7.9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260738 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2021-40153, CVE-2021-41072. Tenab...
AlmaLinux 9.2 [TuxCare] Security Update: squashfs-tools (ALMALINUX9.2:CLSA-2025:1751888935)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751888935 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs...
Rocky Linux 8 [CIQ] Security Update: squashfs-tools / squashfs-tools-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3139)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243139 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic link...
Rocky Linux 8.8 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0309)
The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260309 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...
AlmaLinux 9.2 [TuxCare] Security Update: squashfs-tools (ALMALINUX9.2:CLSA-2025:1750782908)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1750782908 advisory. - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create...
CentOS Linux 7 [TuxCare] Security Update: squashfs-tools (CENTOS7:CLSA-2026:1777544697)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777544697 advisory. - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the...
CLSA-2026-1777544697 squashfs-tools: Fix of CVE-2021-40153
CVE-2021-40153: fix write outside destination directory in unsquashfs...
MiracleLinux 9 : squashfs-tools-4.4-10.git1.el9 (AXSA:2024-7853:01)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7853:01 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic...
MiracleLinux 8 : squashfs-tools-4.3-21.el8 (AXSA:2024-8222:02)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8222:02 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic...
EUVD-2021-27338
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: squashfs-tools (UTSA-2025-680654)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680654 advisory. squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: squashfs-tools (UTSA-2025-680652)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680652 advisory. squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the...