Red Hat Security AdvisoryRHSA-2020:4011
e2fsprogs security and bug fix update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) e2fsprogs-1.42.9-19.el7, e2fsprogs-libs-1.42.9-19.el7, libcom_err-1.42.9-19.el7 +1
- Red Hat Enterprise Linux Client Optional (v. 7) e2fsprogs-devel-1.42.9-19.el7, e2fsprogs-static-1.42.9-19.el7, libcom_err-devel-1.42.9-19.el7 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) e2fsprogs-1.42.9-19.el7, e2fsprogs-libs-1.42.9-19.el7, libcom_err-1.42.9-19.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) e2fsprogs-devel-1.42.9-19.el7, e2fsprogs-static-1.42.9-19.el7, libcom_err-devel-1.42.9-19.el7 +1
- Red Hat Enterprise Linux Server (v. 7) e2fsprogs-1.42.9-19.el7, e2fsprogs-devel-1.42.9-19.el7, e2fsprogs-devel-1.42.9-19.el7.ppc +8
- Red Hat Enterprise Linux Server Optional (v. 7) e2fsprogs-static-1.42.9-19.el7, e2fsprogs-static-1.42.9-19.el7.ppc, libss-devel-1.42.9-19.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) e2fsprogs-1.42.9-19.el7, e2fsprogs-devel-1.42.9-19.el7, e2fsprogs-libs-1.42.9-19.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) e2fsprogs-static-1.42.9-19.el7, libss-devel-1.42.9-19.el7
Fixes 2 records
Priority LOW 37
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.01082 · Published 2020-01-08 · Partial fix CWE-787
Priority LOW 37
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.01105 · Published 2019-09-24 · Partial fix CWE-787