Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | tools/e2fsprogs: update to 1.46.6 | Nick Hainke | 2023-02-08 | 1 | -50/+0 |
| | | | | | | | | | | | | | Release information: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.46.6 Remove upstreamed patch: - 004-CVE-2022-1304-libext2fs-add-sanity-check-to-extent-manipulation.patch Refresh patch: - 003-no-crond.patch Signed-off-by: Nick Hainke <vincent@systemli.org> | ||||
* | e2fsprogs: Fix CVE-2022-1304 | Hauke Mehrtens | 2022-12-06 | 1 | -0/+50 |
This fixes CVE-2022-1304: An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> |