Issued:: 2024-04-30
Updated:: 2024-04-30

RHSA-2024:2437 - Security Advisory

Overview
Updated Packages

Synopsis

Moderate: exfatprogs security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for exfatprogs is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The exfatprogs package contains utilities for formatting and repairing exFAT filesystems.

Security Fix(es):

exfatprogs: exfatprogs allows out-of-bounds memory access (CVE-2023-45897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 9 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
Red Hat Enterprise Linux Server - AUS 9.6 x86_64
Red Hat Enterprise Linux Server - AUS 9.4 x86_64
Red Hat Enterprise Linux for IBM z Systems 9 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat Enterprise Linux for Power, little endian 9 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat Enterprise Linux for ARM 64 9 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

BZ - 2246976 - CVE-2023-45897 exfatprogs: exfatprogs allows out-of-bounds memory access
RHEL-15865 - Rebase exfatprogs to upstream v1.2.2
RHEL-7945 - Fix for OpenScanHub results

CVEs

CVE-2023-45897

References

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 9

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
x86_64
exfatprogs-1.2.2-2.el9.x86_64.rpm	SHA-256: 01147efc5333b197ae05a659d78329a470e8c1d23d95dd9b5db168d78283b6e0
exfatprogs-debuginfo-1.2.2-2.el9.x86_64.rpm	SHA-256: 38e0333823f4340045237e24a0faaac6d4884f3a5360103e5132ec688e31ca2b
exfatprogs-debugsource-1.2.2-2.el9.x86_64.rpm	SHA-256: 335bb757d5b093888bf30a2aa8a5ea6ee5afa6b1728fbf6200363df52e849459

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
x86_64
exfatprogs-1.2.2-2.el9.x86_64.rpm	SHA-256: 01147efc5333b197ae05a659d78329a470e8c1d23d95dd9b5db168d78283b6e0
exfatprogs-debuginfo-1.2.2-2.el9.x86_64.rpm	SHA-256: 38e0333823f4340045237e24a0faaac6d4884f3a5360103e5132ec688e31ca2b
exfatprogs-debugsource-1.2.2-2.el9.x86_64.rpm	SHA-256: 335bb757d5b093888bf30a2aa8a5ea6ee5afa6b1728fbf6200363df52e849459

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
x86_64
exfatprogs-1.2.2-2.el9.x86_64.rpm	SHA-256: 01147efc5333b197ae05a659d78329a470e8c1d23d95dd9b5db168d78283b6e0
exfatprogs-debuginfo-1.2.2-2.el9.x86_64.rpm	SHA-256: 38e0333823f4340045237e24a0faaac6d4884f3a5360103e5132ec688e31ca2b
exfatprogs-debugsource-1.2.2-2.el9.x86_64.rpm	SHA-256: 335bb757d5b093888bf30a2aa8a5ea6ee5afa6b1728fbf6200363df52e849459

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
x86_64
exfatprogs-1.2.2-2.el9.x86_64.rpm	SHA-256: 01147efc5333b197ae05a659d78329a470e8c1d23d95dd9b5db168d78283b6e0
exfatprogs-debuginfo-1.2.2-2.el9.x86_64.rpm	SHA-256: 38e0333823f4340045237e24a0faaac6d4884f3a5360103e5132ec688e31ca2b
exfatprogs-debugsource-1.2.2-2.el9.x86_64.rpm	SHA-256: 335bb757d5b093888bf30a2aa8a5ea6ee5afa6b1728fbf6200363df52e849459

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
x86_64
exfatprogs-1.2.2-2.el9.x86_64.rpm	SHA-256: 01147efc5333b197ae05a659d78329a470e8c1d23d95dd9b5db168d78283b6e0
exfatprogs-debuginfo-1.2.2-2.el9.x86_64.rpm	SHA-256: 38e0333823f4340045237e24a0faaac6d4884f3a5360103e5132ec688e31ca2b
exfatprogs-debugsource-1.2.2-2.el9.x86_64.rpm	SHA-256: 335bb757d5b093888bf30a2aa8a5ea6ee5afa6b1728fbf6200363df52e849459

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
s390x
exfatprogs-1.2.2-2.el9.s390x.rpm	SHA-256: 8811d7392e69e40be96c591d07b83dfa69365d07e3f611d958919ebc8a9370d4
exfatprogs-debuginfo-1.2.2-2.el9.s390x.rpm	SHA-256: 2fd3ed53b9f70db9192f8aad2af0efa181fc11d8f6ef8740bac6e60d4dc795d4
exfatprogs-debugsource-1.2.2-2.el9.s390x.rpm	SHA-256: 5cbcee351b48a802c8268ca93147f194ca0682a5f253503ec724874a40e89e31

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
s390x
exfatprogs-1.2.2-2.el9.s390x.rpm	SHA-256: 8811d7392e69e40be96c591d07b83dfa69365d07e3f611d958919ebc8a9370d4
exfatprogs-debuginfo-1.2.2-2.el9.s390x.rpm	SHA-256: 2fd3ed53b9f70db9192f8aad2af0efa181fc11d8f6ef8740bac6e60d4dc795d4
exfatprogs-debugsource-1.2.2-2.el9.s390x.rpm	SHA-256: 5cbcee351b48a802c8268ca93147f194ca0682a5f253503ec724874a40e89e31

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
s390x
exfatprogs-1.2.2-2.el9.s390x.rpm	SHA-256: 8811d7392e69e40be96c591d07b83dfa69365d07e3f611d958919ebc8a9370d4
exfatprogs-debuginfo-1.2.2-2.el9.s390x.rpm	SHA-256: 2fd3ed53b9f70db9192f8aad2af0efa181fc11d8f6ef8740bac6e60d4dc795d4
exfatprogs-debugsource-1.2.2-2.el9.s390x.rpm	SHA-256: 5cbcee351b48a802c8268ca93147f194ca0682a5f253503ec724874a40e89e31

Red Hat Enterprise Linux for Power, little endian 9

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
ppc64le
exfatprogs-1.2.2-2.el9.ppc64le.rpm	SHA-256: 1cd238fd6697f4206b89bf60a71874c961fad6bc868a1fe3929c51b2f2871a01
exfatprogs-debuginfo-1.2.2-2.el9.ppc64le.rpm	SHA-256: c1435b991d00eedd3db0bffe853c79528cc1496137b9ee540a65b0f34b166da3
exfatprogs-debugsource-1.2.2-2.el9.ppc64le.rpm	SHA-256: e24b9643cb0528bb69d282718fdd648ae9a5f2820256747e7fcca011ba9b0263

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
ppc64le
exfatprogs-1.2.2-2.el9.ppc64le.rpm	SHA-256: 1cd238fd6697f4206b89bf60a71874c961fad6bc868a1fe3929c51b2f2871a01
exfatprogs-debuginfo-1.2.2-2.el9.ppc64le.rpm	SHA-256: c1435b991d00eedd3db0bffe853c79528cc1496137b9ee540a65b0f34b166da3
exfatprogs-debugsource-1.2.2-2.el9.ppc64le.rpm	SHA-256: e24b9643cb0528bb69d282718fdd648ae9a5f2820256747e7fcca011ba9b0263

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
ppc64le
exfatprogs-1.2.2-2.el9.ppc64le.rpm	SHA-256: 1cd238fd6697f4206b89bf60a71874c961fad6bc868a1fe3929c51b2f2871a01
exfatprogs-debuginfo-1.2.2-2.el9.ppc64le.rpm	SHA-256: c1435b991d00eedd3db0bffe853c79528cc1496137b9ee540a65b0f34b166da3
exfatprogs-debugsource-1.2.2-2.el9.ppc64le.rpm	SHA-256: e24b9643cb0528bb69d282718fdd648ae9a5f2820256747e7fcca011ba9b0263

Red Hat Enterprise Linux for ARM 64 9

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
aarch64
exfatprogs-1.2.2-2.el9.aarch64.rpm	SHA-256: 34d53b0a80ca9f3de41d418ce0faa3e74ef76d89a9734f882f1bdc06641363a9
exfatprogs-debuginfo-1.2.2-2.el9.aarch64.rpm	SHA-256: b82ff4c9b46e77a463ac06dd20f18fe36d5c0ead13288e191b046a6e83ef8a4f
exfatprogs-debugsource-1.2.2-2.el9.aarch64.rpm	SHA-256: 355a89b286d6e2bac9f301ede3f559baac5a980e0cc96430de651755dfc85e81

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
aarch64
exfatprogs-1.2.2-2.el9.aarch64.rpm	SHA-256: 34d53b0a80ca9f3de41d418ce0faa3e74ef76d89a9734f882f1bdc06641363a9
exfatprogs-debuginfo-1.2.2-2.el9.aarch64.rpm	SHA-256: b82ff4c9b46e77a463ac06dd20f18fe36d5c0ead13288e191b046a6e83ef8a4f
exfatprogs-debugsource-1.2.2-2.el9.aarch64.rpm	SHA-256: 355a89b286d6e2bac9f301ede3f559baac5a980e0cc96430de651755dfc85e81

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
aarch64
exfatprogs-1.2.2-2.el9.aarch64.rpm	SHA-256: 34d53b0a80ca9f3de41d418ce0faa3e74ef76d89a9734f882f1bdc06641363a9
exfatprogs-debuginfo-1.2.2-2.el9.aarch64.rpm	SHA-256: b82ff4c9b46e77a463ac06dd20f18fe36d5c0ead13288e191b046a6e83ef8a4f
exfatprogs-debugsource-1.2.2-2.el9.aarch64.rpm	SHA-256: 355a89b286d6e2bac9f301ede3f559baac5a980e0cc96430de651755dfc85e81

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
ppc64le
exfatprogs-1.2.2-2.el9.ppc64le.rpm	SHA-256: 1cd238fd6697f4206b89bf60a71874c961fad6bc868a1fe3929c51b2f2871a01
exfatprogs-debuginfo-1.2.2-2.el9.ppc64le.rpm	SHA-256: c1435b991d00eedd3db0bffe853c79528cc1496137b9ee540a65b0f34b166da3
exfatprogs-debugsource-1.2.2-2.el9.ppc64le.rpm	SHA-256: e24b9643cb0528bb69d282718fdd648ae9a5f2820256747e7fcca011ba9b0263

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
ppc64le
exfatprogs-1.2.2-2.el9.ppc64le.rpm	SHA-256: 1cd238fd6697f4206b89bf60a71874c961fad6bc868a1fe3929c51b2f2871a01
exfatprogs-debuginfo-1.2.2-2.el9.ppc64le.rpm	SHA-256: c1435b991d00eedd3db0bffe853c79528cc1496137b9ee540a65b0f34b166da3
exfatprogs-debugsource-1.2.2-2.el9.ppc64le.rpm	SHA-256: e24b9643cb0528bb69d282718fdd648ae9a5f2820256747e7fcca011ba9b0263

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
x86_64
exfatprogs-1.2.2-2.el9.x86_64.rpm	SHA-256: 01147efc5333b197ae05a659d78329a470e8c1d23d95dd9b5db168d78283b6e0
exfatprogs-debuginfo-1.2.2-2.el9.x86_64.rpm	SHA-256: 38e0333823f4340045237e24a0faaac6d4884f3a5360103e5132ec688e31ca2b
exfatprogs-debugsource-1.2.2-2.el9.x86_64.rpm	SHA-256: 335bb757d5b093888bf30a2aa8a5ea6ee5afa6b1728fbf6200363df52e849459

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
x86_64
exfatprogs-1.2.2-2.el9.x86_64.rpm	SHA-256: 01147efc5333b197ae05a659d78329a470e8c1d23d95dd9b5db168d78283b6e0
exfatprogs-debuginfo-1.2.2-2.el9.x86_64.rpm	SHA-256: 38e0333823f4340045237e24a0faaac6d4884f3a5360103e5132ec688e31ca2b
exfatprogs-debugsource-1.2.2-2.el9.x86_64.rpm	SHA-256: 335bb757d5b093888bf30a2aa8a5ea6ee5afa6b1728fbf6200363df52e849459

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
aarch64
exfatprogs-1.2.2-2.el9.aarch64.rpm	SHA-256: 34d53b0a80ca9f3de41d418ce0faa3e74ef76d89a9734f882f1bdc06641363a9
exfatprogs-debuginfo-1.2.2-2.el9.aarch64.rpm	SHA-256: b82ff4c9b46e77a463ac06dd20f18fe36d5c0ead13288e191b046a6e83ef8a4f
exfatprogs-debugsource-1.2.2-2.el9.aarch64.rpm	SHA-256: 355a89b286d6e2bac9f301ede3f559baac5a980e0cc96430de651755dfc85e81

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
aarch64
exfatprogs-1.2.2-2.el9.aarch64.rpm	SHA-256: 34d53b0a80ca9f3de41d418ce0faa3e74ef76d89a9734f882f1bdc06641363a9
exfatprogs-debuginfo-1.2.2-2.el9.aarch64.rpm	SHA-256: b82ff4c9b46e77a463ac06dd20f18fe36d5c0ead13288e191b046a6e83ef8a4f
exfatprogs-debugsource-1.2.2-2.el9.aarch64.rpm	SHA-256: 355a89b286d6e2bac9f301ede3f559baac5a980e0cc96430de651755dfc85e81

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
s390x
exfatprogs-1.2.2-2.el9.s390x.rpm	SHA-256: 8811d7392e69e40be96c591d07b83dfa69365d07e3f611d958919ebc8a9370d4
exfatprogs-debuginfo-1.2.2-2.el9.s390x.rpm	SHA-256: 2fd3ed53b9f70db9192f8aad2af0efa181fc11d8f6ef8740bac6e60d4dc795d4
exfatprogs-debugsource-1.2.2-2.el9.s390x.rpm	SHA-256: 5cbcee351b48a802c8268ca93147f194ca0682a5f253503ec724874a40e89e31

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
exfatprogs-1.2.2-2.el9.src.rpm	SHA-256: 6c816f0030de92f9a0c3af5cc22a0a083593b25057e3069c5c26c13015858b92
s390x
exfatprogs-1.2.2-2.el9.s390x.rpm	SHA-256: 8811d7392e69e40be96c591d07b83dfa69365d07e3f611d958919ebc8a9370d4
exfatprogs-debuginfo-1.2.2-2.el9.s390x.rpm	SHA-256: 2fd3ed53b9f70db9192f8aad2af0efa181fc11d8f6ef8740bac6e60d4dc795d4
exfatprogs-debugsource-1.2.2-2.el9.s390x.rpm	SHA-256: 5cbcee351b48a802c8268ca93147f194ca0682a5f253503ec724874a40e89e31

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.