Red Hat Security AdvisoryRHSA-2015:2151
xfsprogs security, bug fix and enhancement update
Released 2015-11-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) xfsprogs-3.2.2-2.el7
- Red Hat Enterprise Linux Client Optional (v. 7) xfsprogs-devel-3.2.2-2.el7, xfsprogs-qa-devel-3.2.2-2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) xfsprogs-3.2.2-2.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xfsprogs-devel-3.2.2-2.el7, xfsprogs-qa-devel-3.2.2-2.el7
- Red Hat Enterprise Linux Server (v. 7) xfsprogs-3.2.2-2.el7, xfsprogs-3.2.2-2.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) xfsprogs-devel-3.2.2-2.el7, xfsprogs-devel-3.2.2-2.el7.ppc, xfsprogs-qa-devel-3.2.2-2.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) xfsprogs-3.2.2-2.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) xfsprogs-devel-3.2.2-2.el7, xfsprogs-qa-devel-3.2.2-2.el7
Fixes 1 record
Priority LOW 30
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04498 · Published 2015-08-25 · Partial fix CWE-200
