RHSA-2024:2396

csafUSredhat_csaf

Red Hat Security Advisory: squashfs-tools security update

view advisory published 2024-04-30

An update for squashfs-tools is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2021-41072UShigh8.1—
squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to inc…
CVE-2021-40153UShigh8.1—
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The f…
02

references

External citations — patches, advisories, analysis.

03

remediations (26)

  • Fixedsquashfs-tools-0:4.4-10.git1.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-0:4.4-10.git1.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debuginfo-0:4.4-10.git1.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
  • Fixedsquashfs-tools-debugsource-0:4.4-10.git1.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:2396
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan