Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:1364-1

Опубликовано: 26 июн. 2015
Источник: suse-cvrf

Описание

Security update for e2fsprogs

Two security issues were fixed in e2fsprogs:

* CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck, dumpe2fs, e2image). * CVE-2015-1572: Fixed a potential buffer overflow in closefs(). (bsc#918346)

Additionally, badblocks was enhanced to work with very large partitions. (bsc#932539)

Security Issues:

* CVE-2015-0247 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0247> * CVE-2015-1572 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1572>

Список пакетов

SUSE Linux Enterprise Desktop 11 SP3
e2fsprogs-1.41.9-2.10.11.1
libblkid1-2.19.1-6.62.7
libblkid1-32bit-2.19.1-6.62.7
libcom_err2-1.41.9-2.10.11.1
libcom_err2-32bit-1.41.9-2.10.11.1
libext2fs2-1.41.9-2.10.11.1
libuuid-devel-2.19.1-6.62.7
libuuid1-2.19.1-6.62.7
libuuid1-32bit-2.19.1-6.62.7
uuid-runtime-2.19.1-6.62.7
SUSE Linux Enterprise Server 11 SP3
e2fsprogs-1.41.9-2.10.11.1
libblkid1-2.19.1-6.62.7
libblkid1-32bit-2.19.1-6.62.7
libblkid1-x86-2.19.1-6.62.7
libcom_err2-1.41.9-2.10.11.1
libcom_err2-32bit-1.41.9-2.10.11.1
libcom_err2-x86-1.41.9-2.10.11.1
libext2fs2-1.41.9-2.10.11.1
libuuid1-2.19.1-6.62.7
libuuid1-32bit-2.19.1-6.62.7
libuuid1-x86-2.19.1-6.62.7
uuid-runtime-2.19.1-6.62.7
SUSE Linux Enterprise Server 11 SP3-TERADATA
e2fsprogs-1.41.9-2.10.11.1
libblkid1-2.19.1-6.62.7
libblkid1-32bit-2.19.1-6.62.7
libblkid1-x86-2.19.1-6.62.7
libcom_err2-1.41.9-2.10.11.1
libcom_err2-32bit-1.41.9-2.10.11.1
libcom_err2-x86-1.41.9-2.10.11.1
libext2fs2-1.41.9-2.10.11.1
libuuid1-2.19.1-6.62.7
libuuid1-32bit-2.19.1-6.62.7
libuuid1-x86-2.19.1-6.62.7
uuid-runtime-2.19.1-6.62.7
SUSE Linux Enterprise Server for SAP Applications 11 SP3
e2fsprogs-1.41.9-2.10.11.1
libblkid1-2.19.1-6.62.7
libblkid1-32bit-2.19.1-6.62.7
libblkid1-x86-2.19.1-6.62.7
libcom_err2-1.41.9-2.10.11.1
libcom_err2-32bit-1.41.9-2.10.11.1
libcom_err2-x86-1.41.9-2.10.11.1
libext2fs2-1.41.9-2.10.11.1
libuuid1-2.19.1-6.62.7
libuuid1-32bit-2.19.1-6.62.7
libuuid1-x86-2.19.1-6.62.7
uuid-runtime-2.19.1-6.62.7
SUSE Linux Enterprise Software Development Kit 11 SP3
e2fsprogs-devel-1.41.9-2.10.11.1
libblkid-devel-2.19.1-6.62.7
libblkid-devel-32bit-2.19.1-6.62.7
libcom_err-devel-1.41.9-2.10.11.1
libcom_err-devel-32bit-1.41.9-2.10.11.1
libext2fs-devel-1.41.9-2.10.11.1
libext2fs-devel-32bit-1.41.9-2.10.11.1
libext2fs2-32bit-1.41.9-2.10.11.1
libext2fs2-x86-1.41.9-2.10.11.1
libuuid-devel-2.19.1-6.62.7
libuuid-devel-32bit-2.19.1-6.62.7

Ссылки

Описание

Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:e2fsprogs-1.41.9-2.10.11.1
SUSE Linux Enterprise Desktop 11 SP3:libblkid1-2.19.1-6.62.7
SUSE Linux Enterprise Desktop 11 SP3:libblkid1-32bit-2.19.1-6.62.7
SUSE Linux Enterprise Desktop 11 SP3:libcom_err2-1.41.9-2.10.11.1
Ссылки

Описание

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:e2fsprogs-1.41.9-2.10.11.1
SUSE Linux Enterprise Desktop 11 SP3:libblkid1-2.19.1-6.62.7
SUSE Linux Enterprise Desktop 11 SP3:libblkid1-32bit-2.19.1-6.62.7
SUSE Linux Enterprise Desktop 11 SP3:libcom_err2-1.41.9-2.10.11.1
Ссылки