Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 21: FEDORA-2015-10760 Critical: Squashfs-Tools Integer Overflow

fedora
Calendar Grey July 21, 2015
Dist Fedora Esm H88
Fedora 21 security alert tackles severe squahsfs-tools flaws, preserving system robustness and protection.
Security fix for CVE-2015-4645 / CVE-2015-4646

Summary

Squashfs is a highly compressed read-only filesystem for Linux. This package

contains the utilities for manipulating squashfs filesystems.

Update Information:

Security fix for CVE-2015-4645 / CVE-2015-4646

Topics%20covered

Topics Covered

security advisory fedora critical threat integer overflow squashfs-tools

Change Log

* Tue Jun 23 2015 Bruno Wolff III - 4.3-10 - Fix for CVE 2015-4645/4646 * Fri Jun 19 2015 Fedora Release Engineering - 4.3-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

References


[ 1 ] Bug #1234886 - CVE-2015-4645 squashfs-tools: integer overflow in read_fragment_table_4 https://bugzilla.redhat.com/show_bug.cgi?id=1234886

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update squashfs-tools' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: squashfs-tools
Product: Fedora 21
Version: 4.3
Release: 11.fc21
URL:
Summary: Utility for the creation of squashfs filesystems

Topics%20covered

Topics Covered

security advisory fedora critical threat integer overflow squashfs-tools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here