3 matches found
BELL-CVE-2021-41072 CVE-2021-41072 does not affect BellSoft software
Bulletin has no description...
OESA-2021-1425 squashfs-tools security update
Squashfs is a highly compressed read-only filesystem for Linux. It uses either gzip/xz/lzo/lz4/zstd compression to compress both files, inodes and directories. Security Fixes: squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than...
AZL-7464 CVE-2021-41072 affecting package squashfs-tools for versions less than 4.5.1-1
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...