Medium ELSA-2022-8361 1 CVE

Moderate: e2fsprogs security update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[1.46.5-3]
- Add sanity check to extent manipulation (#2073549)

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 9	e2fsprogs	0:1.46.5-3.el9
Oracle Linux · 9	e2fsprogs-devel	0:1.46.5-3.el9
Oracle Linux · 9	e2fsprogs-libs	0:1.46.5-3.el9
Oracle Linux · 9	libcom_err	0:1.46.5-3.el9
Oracle Linux · 9	libcom_err-devel	0:1.46.5-3.el9
Oracle Linux · 9	libss	0:1.46.5-3.el9

Vulnerabilities 1

High 7.8

CVE-2022-1304

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and p…

e2fsprogs e2fsprogs e2fsprogs e2fsprogs Debian Ubuntu Azure Linux Alpine

Apr 14, 2022