portage-ng / portage / sys-fs / f2fs-tools / 9999
portage-ng glsa
1 advisory reference sys-fs/f2fs-tools · none place version 9999 in a vulnerable range
▸ GLSA 202101-26 f2fs-tools: Multiple vulnerabilities this version unaffected normal remote 2021-01-26

Multiple vulnerabilities have been found in f2fs-tools, the worst of which could result in the arbitrary execution of code.

Announced
2021-01-26
Revised
2021-01-26
Access
remote
Bugs
#749318
Advisory
https://security.gentoo.org/glsa/202101-26

Affected packages

PackageArchVulnerableUnaffected
sys-fs/f2fs-tools*< 1.14.0>= 1.14.0

Background

Tools for Flash-Friendly File System (F2FS).

Description

Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All f2fs-tools users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-fs/f2fs-tools-1.14.0"

References