CVE-2015-1572

Updated e2fsprogs packages fix security vulnerability:

The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to trigger the vulnerability. This is due to an incomplete fix for CVE-2015-0247 (CVE-2015-1572).

Two security issues were fixed in e2fsprogs:

Security issues fixed:

• CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck, dumpe2fs, e2image...).
• CVE-2015-1572: Fixed a potential buffer overflow in closefs() (bsc#918346 )

Two security issues were fixed in e2fsprogs:

* CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck,
  dumpe2fs, e2image).
* CVE-2015-1572: Fixed a potential buffer overflow in closefs().
  (bsc#918346)

Additionally, badblocks was enhanced to work with very large partitions. (bsc#932539)

Security Issues:

* CVE-2015-0247
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0247>
* CVE-2015-1572
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1572>

This update for e2fsprogs fixes the following issues:

Security issues fixed:

• CVE-2015-0247: Fixed couple of heap overflows in e2fsprogs (fsck, dumpe2fs, e2image...) (bsc#915402).
• CVE-2015-1572: Fixed potential buffer overflow in closefs() (bsc#918346).

Bug fixes:

• bsc#1038194: generic/405 test fails with /dev/mapper/thin-vol is inconsistent on ext4 file system.
• bsc#1009532: resize2fs hangs when trying to resize a large ext4 file system.
• bsc#960273: xfsprogs does not call %{?regenerate_initrd_post}.

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.

Jose Duart discovered that e2fsprogs incorrectly handled invalid block group descriptor data. A local attacker could use this issue with a crafted filesystem image to possibly execute arbitrary code. (CVE-2015-0247, CVE-2015-1572)