Ubuntu 21.04 USN-5078-1 Moderate: Squashfs-Tools File Overwrite

ubuntu

September 15, 2021

Squashfs-Tools could be made to overwrite files.

Summary

Squashfs-Tools could be made to overwrite files.

Software Description:

- squashfs-tools: Tools to create and modify squashfs filesystems

Details:

Richard Weinberger discovered that Squashfs-Tools mishandled certain

malformed SQUASHFS files. An attacker could use this vulnerability to

write arbitrary files to the filesystem.

Topics Covered

security advisory moderate software update file overwrite ubuntu attack vector squashfs-tools

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  squashfs-tools                  1:4.4-2ubuntu0.2

Ubuntu 20.04 LTS:
  squashfs-tools                  1:4.4-1ubuntu0.2

Ubuntu 18.04 LTS:
  squashfs-tools                  1:4.3-6ubuntu0.18.04.4

In general, a standard system update will make all the necessary changes.