Accepted e2fsprogs 1.43.4-2+deb9u2 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 25 Jul 2020 11:03:02 +0200
Source: e2fsprogs
Binary: fuse2fs e2fsck-static libcomerr2 comerr-dev libss2 ss-dev e2fsprogs-udeb e2fslibs e2fslibs-dev e2fsprogs
Architecture: source amd64
Version: 1.43.4-2+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Theodore Y. Ts'o <tytso@mit.edu>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
comerr-dev - common error description library - headers and static libraries
e2fsck-static - statically-linked version of the ext2/ext3/ext4 filesystem checke
e2fslibs - ext2/ext3/ext4 file system libraries
e2fslibs-dev - ext2/ext3/ext4 file system libraries - headers and static librari
e2fsprogs - ext2/ext3/ext4 file system utilities
e2fsprogs-udeb - stripped-down versions of e2fsprogs, for debian-installer (udeb)
fuse2fs - ext2 / ext3 / ext4 file system driver for FUSE
libcomerr2 - common error description library
libss2 - command-line interface parsing library
ss-dev - command-line interface parsing library - headers and static libra
Changes:
e2fsprogs (1.43.4-2+deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2019-5188
A specially crafted ext4 directory can cause an out-of-bounds write
on the stack, resulting in code execution. An attacker can corrupt a
partition to trigger this vulnerability.
* If directory has been deleted in pass1[bcd] processing, then we
shouldn't try to rehash the directory in pass 3a when we try to
rehash/reoptimize directories.
Checksums-Sha1:
368be884eca88078199a421489cdf50f349c477c 2575 e2fsprogs_1.43.4-2+deb9u2.dsc
53f2f3f9f7f9f645bcb66705b038721d56abeb0a 7552218 e2fsprogs_1.43.4.orig.tar.gz
18a104e313a1c4eb13551de5e9d2f328c2f4acb2 79360 e2fsprogs_1.43.4-2+deb9u2.debian.tar.xz
8f654399de9160dc0f16465606c9b34188e419c7 38440 comerr-dev_2.1-1.43.4-2+deb9u2_amd64.deb
3099aad6d6a1c28c2cbbe1a1364f5c136d817380 911652 e2fsck-static-dbgsym_1.43.4-2+deb9u2_amd64.deb
3d9a5e303f53fad9caeca423aa5792a0443b25bd 619336 e2fsck-static_1.43.4-2+deb9u2_amd64.deb
f32c61c31b7be1ce98cbac5346d770328cbc23a7 517092 e2fslibs-dbgsym_1.43.4-2+deb9u2_amd64.deb
b2f905848ad8bb2013bb2a5de95da3f92e9fcc06 231332 e2fslibs-dev_1.43.4-2+deb9u2_amd64.deb
004546a715a8862ba5e1c26f9228e43da947eb6e 208476 e2fslibs_1.43.4-2+deb9u2_amd64.deb
bfb8d9fa26c2bdc0aac4444f72ab2ddee12d25e4 1232236 e2fsprogs-dbgsym_1.43.4-2+deb9u2_amd64.deb
33d932323ad559b3395d9b953693477129f7c87d 302112 e2fsprogs-udeb_1.43.4-2+deb9u2_amd64.udeb
15814f6d901e597cdb0c8a60cfa1113d886cb02b 10940 e2fsprogs_1.43.4-2+deb9u2_amd64.buildinfo
91ee839763bae4f3fb6eac99eec496c23b9f2b76 947822 e2fsprogs_1.43.4-2+deb9u2_amd64.deb
d2e3457728d66a84048324091830c36745430ba6 86884 fuse2fs-dbgsym_1.43.4-2+deb9u2_amd64.deb
8e7cd1ca06e3db778964543abd780e71fbadff32 85594 fuse2fs_1.43.4-2+deb9u2_amd64.deb
5c32cfa4770098b7c4569cb40d5cc64f58543679 11986 libcomerr2-dbgsym_1.43.4-2+deb9u2_amd64.deb
865177762191af72201887a62a42c6db6772c086 63780 libcomerr2_1.43.4-2+deb9u2_amd64.deb
d1d3e12e5c24a9e56697800f6ba8659f56a828e6 28526 libss2-dbgsym_1.43.4-2+deb9u2_amd64.deb
f132af2cca33b0ea7c9d6ed0e5b8f998c5f8d6ff 68006 libss2_1.43.4-2+deb9u2_amd64.deb
5f2564fdb94f13ea2fb53f366c083ea45e911cdd 17054 ss-dev_2.0-1.43.4-2+deb9u2_amd64.deb
Checksums-Sha256:
40b9eac8d59a005d1e3677bf6bc4f152521dd9155805e0a0368aae668e06dd30 2575 e2fsprogs_1.43.4-2+deb9u2.dsc
484ab0bc1bc07c64267b18cfe7871b6b975bf0a705c5a4563001f035071cdc7c 7552218 e2fsprogs_1.43.4.orig.tar.gz
34c815b2b70f7d44bf0a308324e4371fc7e7c149dcafcf9f39dd64bfc387c631 79360 e2fsprogs_1.43.4-2+deb9u2.debian.tar.xz
b3c1cab8e89096a0da2ab65bf7ae84fe49402d29926c8eef14178524316ea397 38440 comerr-dev_2.1-1.43.4-2+deb9u2_amd64.deb
73aedc3acdff4f69ec3a5fdc720328ebd079a42aabf8e9b5c764f6edd1717661 911652 e2fsck-static-dbgsym_1.43.4-2+deb9u2_amd64.deb
b918bd8905938a27e526b9b2e6761cafd66f61e33d4594b2ec16efee89f1b932 619336 e2fsck-static_1.43.4-2+deb9u2_amd64.deb
619f7e551c6744530a12fb640a8f3ff0d40b57fed3ba2a2edf5ef0423bdf488c 517092 e2fslibs-dbgsym_1.43.4-2+deb9u2_amd64.deb
9d330a2e6c12fbeb195486932166ccccb519b4ba6c55a5eac6c2bb0f56297a42 231332 e2fslibs-dev_1.43.4-2+deb9u2_amd64.deb
18d09a95f26c4120ab798a3ea17c76e91a477aba43b4610242574476fd90c37b 208476 e2fslibs_1.43.4-2+deb9u2_amd64.deb
20d84e597dc44e3745a2d756eaa6cf58c835d017078994abea8c07f9412590ee 1232236 e2fsprogs-dbgsym_1.43.4-2+deb9u2_amd64.deb
4d7c080c54c6060c0c38cf93b85cf4947fd58cb25c34e6f0c2be89f35848f92c 302112 e2fsprogs-udeb_1.43.4-2+deb9u2_amd64.udeb
711ae2cdcff7906a8e7fd36c1ad0a88db0bbb3ec6eb6b83f8ad538547532d12f 10940 e2fsprogs_1.43.4-2+deb9u2_amd64.buildinfo
97a2d283fa61f709fc83a38b0df6f9f1368230da9a48a57889546669d6f09cb4 947822 e2fsprogs_1.43.4-2+deb9u2_amd64.deb
2813dff8822fb57047b0993eeb032b3fe94ad45c993118b6d4712ddfdfb7b689 86884 fuse2fs-dbgsym_1.43.4-2+deb9u2_amd64.deb
56abff09c670d7412abb997674ee205db6914ba83cee6fbca00b95c09132c7e5 85594 fuse2fs_1.43.4-2+deb9u2_amd64.deb
39013ed392fbf5278c8567b394c11f85d81298f03e263ca8ea5431cd4152e823 11986 libcomerr2-dbgsym_1.43.4-2+deb9u2_amd64.deb
e780771ab48952b320d75790fb80b56f00d768e1566411f654d5d03d8ef4f425 63780 libcomerr2_1.43.4-2+deb9u2_amd64.deb
1815f844eae6ca3232961a8afb8467f579acfe3a217415fc4dff858f93d55ce7 28526 libss2-dbgsym_1.43.4-2+deb9u2_amd64.deb
fc71a839adee4d566bb91b494d4de4eae6b206dbbfd9df852c3f6bd7331656f3 68006 libss2_1.43.4-2+deb9u2_amd64.deb
9448a91bb4e2b5d065282d748d186d25d5a62c16570f05a1ecc362f1b4759045 17054 ss-dev_2.0-1.43.4-2+deb9u2_amd64.deb
Files:
96eae13ce8809bd21be503ec7e20a8b7 2575 admin required e2fsprogs_1.43.4-2+deb9u2.dsc
3f1370601996afd8636e4a8a4d1b29bb 7552218 admin required e2fsprogs_1.43.4.orig.tar.gz
5e03aa9a561054a762f3c7bf560a759d 79360 admin required e2fsprogs_1.43.4-2+deb9u2.debian.tar.xz
7809d50d1ddbcbc3f95613d792ad993a 38440 libdevel extra comerr-dev_2.1-1.43.4-2+deb9u2_amd64.deb
3d9c710c91133c5c6e582c56254c8808 911652 debug extra e2fsck-static-dbgsym_1.43.4-2+deb9u2_amd64.deb
87faae4cc1dfd210da685fda19323e86 619336 admin optional e2fsck-static_1.43.4-2+deb9u2_amd64.deb
634eebafd94ab75f91fce6ce4747e069 517092 debug extra e2fslibs-dbgsym_1.43.4-2+deb9u2_amd64.deb
6bfaf742ff4561a90bcdac629478ddef 231332 libdevel extra e2fslibs-dev_1.43.4-2+deb9u2_amd64.deb
03d3fbdd385440f607bec757153c0031 208476 libs required e2fslibs_1.43.4-2+deb9u2_amd64.deb
ac391252e4e9b76ed5259b0e18ff4e10 1232236 debug extra e2fsprogs-dbgsym_1.43.4-2+deb9u2_amd64.deb
2cc8733209195a2dc3ca18c15f4877f1 302112 debian-installer optional e2fsprogs-udeb_1.43.4-2+deb9u2_amd64.udeb
38e9346803268e1f2cdf5263d5e6589d 10940 admin required e2fsprogs_1.43.4-2+deb9u2_amd64.buildinfo
bccc5b159a6ddffcd6ff2b0d2c7da409 947822 admin required e2fsprogs_1.43.4-2+deb9u2_amd64.deb
b1162d25a5a83fa2ab5e65f38d56765d 86884 debug extra fuse2fs-dbgsym_1.43.4-2+deb9u2_amd64.deb
c613b8d98f354843e4d12f828bd0059e 85594 admin optional fuse2fs_1.43.4-2+deb9u2_amd64.deb
1e7a052f27ef739cf8da12cc79557a59 11986 debug extra libcomerr2-dbgsym_1.43.4-2+deb9u2_amd64.deb
90565d2a77136cf0758c36b7bd72a396 63780 libs required libcomerr2_1.43.4-2+deb9u2_amd64.deb
d74e0c2ad069ce31c7b094af5aaee388 28526 debug extra libss2-dbgsym_1.43.4-2+deb9u2_amd64.deb
3a215e314a67f911de3258f49e16183a 68006 libs required libss2_1.43.4-2+deb9u2_amd64.deb
50e366b2462c880e45e86bcbd6c6f73b 17054 libdevel extra ss-dev_2.0-1.43.4-2+deb9u2_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl8dT0RfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYRyn1D/wKhqgmBD6l5GvtoMEvXdCY7WloZCdy
w8FcPRQXRIeaBWLbwTgdxcHJYS7+fJDWkGSThoLteqFMEx0JGlbyZnOw4nU3WadM
9ofqCFD/9MSrVQ9cvsgvK97bDzeeNe43/xZL+3YIhnPe9osQn+AHNvsAf4yR27Mc
wVsjzjsoZ568X8nMgEax2TpXVDmZ1Gqi5TACST9lhjcj+pUfmJtOAv6dmvF+qhhS
OSH8jLy5m9Nenzn3KA/CZrIkI4Qj9ZaXLzA7GEEMt4Ps22CY19rnFvxlzzmah7R5
SPyEo+bHFY5DWqWVK4vXUUg1UTI59ZydSYdhfYQ6P3JqWTO15PDGWCJMeogeBJH1
c1WLKpr3yaCWFbji2OfQFR8huUlKmiqyspZpKB92RixhIikQGqXUFUwzl0m041XE
Kp+92dXivIASkW9Px2zosQyKpiPXxEHfJ9p/Sp8+Tv6h97klnz4+xDl9UbU57Ky0
0HYLjbvxINW/t+AnpDKzHQJ6aGrcvZY2gviRTu5bbvvdXXyDI/Z8Rle9CI+58lFa
XKFz75vw8bLVlDuZMzAaCB4dnl9M1kjbFA8F+6c1/VQ79rU6HlbS0Yv5+BYtpmZ8
LxYHUvuYJOMC7/VDZ6zQmrp6uSjI+ME3UnN6hbPGPvQ+W3aIps38ykLptgxoZfEq
fBS2ePlt1ZYDrQ==
=4o/R
-----END PGP SIGNATURE-----