| Package | e2fsprogs |
|---|---|
| Version | 1.42.12-2+deb8u3 (jessie), 1.43.4-2+deb9u3 (stretch), 1.44.5-1+deb10u4 (buster) |
| Related CVEs | CVE-2022-1304 |
An out-of-bounds read/write vulnerability has been fixed in the e2fsck tool of the ext2/ext3/ext4 file system utilities e2fsprogs.
For Debian 10 buster, these problems have been fixed in version 1.44.5-1+deb10u4.
For Debian 8 jessie, these problems have been fixed in version 1.42.12-2+deb8u3.
For Debian 9 stretch, these problems have been fixed in version 1.43.4-2+deb9u3.
We recommend that you upgrade your e2fsprogs packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.