com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2024-22493 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2023-49486 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2023-49447 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2023-49398 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2023-49381 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2023-49376 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

Unbreakable Enterprise kernel security update

4.14.35-2047.529.3 - uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. Somasundaram Krishnasamy Orabug: 35724203 - LTS version: v4.14.322 Saeed Mirzamohammadi - drm/edid: fix objtool warning in drmcvtmodes Linus Torvalds - mtd: rawnand: omapelm: Fix incorrect type i...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2021-31635 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

PT-2025-38041

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc2-xfstests-00056-g131086faa369 139 Description A flaw exists in the Linux kernel related to the ext2/dax subsystem. Specifically, the ext2 setsize function does not handle page-aligned lengths correctly,...

PT-2025-40711

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ext2 functionality related to block size validity during mount operations. Insufficient validation of the block size log stored in the superblock coul...

SUSE CVE-2005-0400

The ext2makeempty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block...

SUSE CVE-2005-2801

xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the nameindex fields when sharing xattr blocks, which could prevent default ACLs from being applied...

SUSE CVE-2006-6054

The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service crash via an ext2 stream with malformed data structures that triggers an error in the ext2checkpage due to a length that is smaller than the minimum...

SUSE CVE-2015-8952

The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service soft lockup via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samb...

SUSE CVE-2017-9763

The grubext2readblock function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service excessive stack use and application crash via a crafted binary file, related to use of a variable-size stack array...

GSD-2023-1000487 ext2: unbugger ext2_empty_dir()

ext2: unbugger ext2emptydir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit 84b35f6efccec6c7f5446dfbdcd3cbf896e644ad, it was...

PT-2023-33564 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext2 empty dir function in the Linux Kernel. It was introduced in version v5.19 and fixed in version v6.0.18. The actual impact and attack plausibility have not y...

Moderate: Red Hat Security Advisory: e2fsprogs security update

An update for e2fsprogs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RLSA-2022:8361 Moderate: e2fsprogs security update

The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems. Security Fixes: e2fsprogs: out-of-bounds read/write via crafted filesystem CVE-2022-1304 For more details about the security issues, including the impact, ...