Summary
[3.2.2-2]
- Fix xfs_metadump disclosure flaw, CVE-2012-2150 (#1251118)
[3.2.2-1]
- Update to upstream v3.2.2, plus fixes from v3.2.3 (#1223991)
- repair: fix unnecessary secondary scan if only last sb is corrupt (#1201238)
- repair: check ino alignment value to avoid mod by zero (#1223444)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | xfsprogs | 0:3.2.2-2.el7 |
| Oracle Linux · 7 | xfsprogs-devel | 0:3.2.2-2.el7 |
| Oracle Linux · 7 | xfsprogs-qa-devel | 0:3.2.2-2.el7 |
Vulnerabilities 1
-
Unscored —
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain se…