aboutsummaryrefslogtreecommitdiffstats
path: root/tools/e2fsprogs/patches/004-CVE-2022-1304-libext2fs-add-sanity-check-to-extent-manipulation.patch
Commit message (Collapse)AuthorAgeFilesLines
* tools/e2fsprogs: update to 1.46.6Nick Hainke2023-02-081-50/+0
| | | | | | | | | | | | | Release information: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.46.6 Remove upstreamed patch: - 004-CVE-2022-1304-libext2fs-add-sanity-check-to-extent-manipulation.patch Refresh patch: - 003-no-crond.patch Signed-off-by: Nick Hainke <vincent@systemli.org>
* e2fsprogs: Fix CVE-2022-1304Hauke Mehrtens2022-12-061-0/+50
This fixes CVE-2022-1304: An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>