Summary
This update for e2fsprogs fixes the following issues:
Security issue fixed:
- CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101)
Non-security issue fixed:
- libext2fs: Call fsync(2) to clear stale errors for a new a unix I/O channel. (bsc#1145716)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 12 SP4 Linux Enterprise Desktop 12 SP4 | e2fsprogs | 1.43.8-3.8.1 |
| SUSE · SLES 12 SP4 Linux Enterprise Server 12 SP4 | e2fsprogs | 1.43.8-3.8.1 |
| SUSE · SLES for SAP 12 SP4 Linux Enterprise Server for SAP Applications 12 SP4 | e2fsprogs | 1.43.8-3.8.1 |
| SUSE · SLES 12 SP4 Linux Enterprise Software Development Kit 12 SP4 | e2fsprogs | 1.43.8-3.8.1 |
Vulnerabilities 1
-
High 7.5
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially cra…