Описание
Security update for e2fsprogs
This update for e2fsprogs fixes the following issues:
- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)
Список пакетов
Container suse/sles12sp3:latest
libcom_err2-1.42.11-16.9.1
HPE Helion OpenStack 8
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server 12 SP2-BCL
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server 12 SP3-BCL
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server 12 SP3-LTSS
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE OpenStack Cloud 8
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE OpenStack Cloud Crowbar 8
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
Ссылки
- Link for SUSE-SU-2022:1652-1
- E-Mail link for SUSE-SU-2022:1652-1
- SUSE Security Ratings
- SUSE Bug 1198446
- SUSE CVE CVE-2022-1304 page
Описание
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Затронутые продукты
Container suse/sles12sp3:latest:libcom_err2-1.42.11-16.9.1
HPE Helion OpenStack 8:e2fsprogs-1.42.11-16.9.1
HPE Helion OpenStack 8:libcom_err2-1.42.11-16.9.1
HPE Helion OpenStack 8:libcom_err2-32bit-1.42.11-16.9.1
Ссылки
- CVE-2022-1304
- SUSE Bug 1198446
- SUSE Bug 1201130