Lucene search

K
redhatRedHatRHSA-2024:2396
HistoryApr 30, 2024 - 6:15 a.m.

(RHSA-2024:2396) Moderate: squashfs-tools security update

2024-04-3006:15:35
access.redhat.com
9
rhsa-2024:2396
squashfs
linux
security update
file system
unvalidated filepaths
directory traversal
cve-2021-40153
cve-2021-41072
red hat enterprise linux 9.4

6.8 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.3%

SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems.

Security Fix(es):

  • squashfs-tools: unvalidated filepaths allow writing outside of destination (CVE-2021-40153)

  • squashfs-tools: possible Directory Traversal via symbolic link (CVE-2021-41072)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.