USN-4142-2: e2fsprogs vulnerability
USN-4142-1 fixed a vulnerability in e2fsprogs. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that e2fsprogs incorrectly handled certain ext4 partitions. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in 1.42.9-3ubuntu1.3+esm1 - Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in 1.42-1ubuntu2.4 - Upgrade
Upgrade
e2fsprogsto a version that resolves this vulnerability.Patch USN-4142-1 - Upgrade
Upgrade
e2fsprogsto a version that resolves this vulnerability.Patch USN-4142-2
Event History
Frequently Asked Questions
What is the severity of USN-4142-2?
The severity of USN-4142-2 relates to a vulnerability in e2fsprogs that affects ext4 partitions, allowing potential exploitation by attackers.
How do I fix USN-4142-2?
To fix USN-4142-2, upgrade the e2fsprogs package to the versions specified in the advisory for your Ubuntu release.
What versions of Ubuntu are affected by USN-4142-2?
USN-4142-2 affects Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
What is the vulnerability described in USN-4142-2?
USN-4142-2 addresses a vulnerability in e2fsprogs that could allow an attacker to exploit certain ext4 partitions.
Is USN-4142-2 related to previous advisories?
Yes, USN-4142-2 follows up on USN-4142-1, providing fixes specifically for older Ubuntu ESM versions.