Debian Security Advisory

DLA-153-1 e2fsprogs -- LTS security update

Date Reported:
16 Feb 2015
Affected Packages:
e2fsprogs
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2015-0247.
More information:

A broken (or maliciously crafted) file system could trigger a buffer overflow in e2fsprogs.

This update has been prepared by Nguyen Cong.

For Debian 6 Squeeze, these issues have been fixed in e2fsprogs version 1.41.12-4+deb6u1