Medium ELSA-2022-7720 1 CVE

Moderate: e2fsprogs security and bug fix update (Oracle Linux 8)

Published Nov 15, 2022 · Updated Nov 15, 2022

Ecosystem: Oracle Linux

Summary

[1.45.6-5]
- Update e2fsprogs with upstream fixes and improvements (#2083621)
- Fix out-of-bounds read/write via crafter filesystem (#2073548)

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 8	e2fsprogs	0:1.45.6-5.el8
Oracle Linux · 8	e2fsprogs-devel	0:1.45.6-5.el8
Oracle Linux · 8	e2fsprogs-libs	0:1.45.6-5.el8
Oracle Linux · 8	libcom_err	0:1.45.6-5.el8
Oracle Linux · 8	libcom_err-devel	0:1.45.6-5.el8
Oracle Linux · 8	libss	0:1.45.6-5.el8
Oracle Linux · 8	libss-devel	0:1.45.6-5.el8

Vulnerabilities 1

High 7.8

CVE-2022-1304

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and p…

e2fsprogs e2fsprogs e2fsprogs e2fsprogs Debian Ubuntu Azure Linux Alpine

Apr 14, 2022