USN-2507-1: e2fsprogs vulnerabilities
23 February 2015
e2fsprogs could be made to crash or run programs as an administrator if it processed a specially crafted filesystem image.
- e2fsprogs - ext2/ext3/ext4 file system utilities
Jose Duart discovered that e2fsprogs incorrectly handled invalid block
group descriptor data. A local attacker could use this issue with a
crafted filesystem image to possibly execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.