Medium ELSA-2024-12704 1 CVE

Moderate: e2fsprogs security update (Oracle Linux 7)

Published Oct 4, 2024 · Updated Oct 4, 2024

Ecosystem: Oracle Linux

Summary

[1.45.4-3.0.7]
- libext2fs: add sanity check to extent manipulation (Srivathsa Dara) [Orabug:
37095032] {CVE-2022-1304}

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 7	e2fsprogs	0:1.45.4-3.0.7.el7
Oracle Linux · 7	e2fsprogs-devel	0:1.45.4-3.0.7.el7
Oracle Linux · 7	e2fsprogs-libs	0:1.45.4-3.0.7.el7
Oracle Linux · 7	e2fsprogs-static	0:1.45.4-3.0.7.el7
Oracle Linux · 7	libcom_err	0:1.45.4-3.0.7.el7
Oracle Linux · 7	libcom_err-devel	0:1.45.4-3.0.7.el7
Oracle Linux · 7	libss	0:1.45.4-3.0.7.el7
Oracle Linux · 7	libss-devel	0:1.45.4-3.0.7.el7

Vulnerabilities 1

High 7.8

CVE-2022-1304

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and p…

e2fsprogs e2fsprogs e2fsprogs e2fsprogs Debian Ubuntu Azure Linux Alpine

Apr 14, 2022