Ubuntu
elfutils package

elfutils 0.170-0.4ubuntu0.1 source package in Ubuntu

Changelog

elfutils (0.170-0.4ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: DoS via a crafted file
    - debian/patches/CVE-2018-16062.patch: make sure there is enough data
      to read full aranges header in libdw/dwarf_getaranges.c,
      src/readelf.c.
    - CVE-2018-16062
  * SECURITY UPDATE: double free and application crash
    - debian/patches/CVE-2018-16402.patch: return error if elf_compress_gnu
      is used on SHF_COMPRESSED section in libelf/elf_compress_gnu.c,
      libelf/libelf.h.
    - CVE-2018-16402
  * SECURITY UPDATE: incorrect end of the attributes list check
    - debian/patches/CVE-2018-16403.patch: check end of attributes list
      consistently in libdw/dwarf_getabbrev.c, libdw/dwarf_hasattr.c.
    - CVE-2018-16403
  * SECURITY UPDATE: invalid memory address dereference
    - debian/patches/CVE-2018-18310.patch: sanity check partial core file
      data reads in libdwfl/dwfl_segment_report_module.c.
    - CVE-2018-18310
  * SECURITY UPDATE: invalid memory address dereference
    - debian/patches/CVE-2018-18520.patch: handle recursive ELF ar files in
      src/size.c.
    - CVE-2018-18520
  * SECURITY UPDATE: divide by zero vulnerabilties
    - debian/patches/CVE-2018-18521.patch: check that sh_entsize isn't zero
      in src/arlib.c.
    - CVE-2018-18521
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2019-7149.patch: check terminating NUL byte in
      dwarf_getsrclines for dir/file table in libdw/dwarf_getsrclines.c,
      src/readelf.c.
    - CVE-2019-7149
  * SECURITY UPDATE: incorrect truncated dyn data read handling
    - debian/patches/CVE-2019-7150.patch: sanity check partial core file
      dyn data read in libdwfl/dwfl_segment_report_module.c.
    - CVE-2019-7150
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2019-7665.patch: check NT_PLATFORM core notes
      contain a zero terminated string in libdwfl/linux-core-attach.c,
      libebl/eblcorenote.c, libebl/libebl.h, src/readelf.c.
    - CVE-2019-7665

 -- Marc Deslauriers <email address hidden>  Fri, 07 Jun 2019 11:31:15 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main libs
Bionic security main libs

Downloads

File Size SHA-256 Checksum
elfutils_0.170.orig.tar.bz2 8.0 MiB 1f844775576b79bdc9f9c717a50058d08620323c1e935458223a12f249c9e066
elfutils_0.170-0.4ubuntu0.1.debian.tar.xz 50.5 KiB 9978a38393fac9df0bcb6eeb08741cf29d3161beeb463e2d8e26cb1a7fe8a3cc
elfutils_0.170-0.4ubuntu0.1.dsc 2.4 KiB 2c856af4e5833a5546ed8d82886fe8e7e3017375b1f2572d1873790bbf124b12

View changes file

Binary packages built by this source

elfutils: collection of utilities to handle ELF objects

 Elfutils is a collection of utilities, including eu-ld (a linker),
 eu-nm (for listing symbols from object files), eu-size (for listing the
 section sizes of an object or archive file), eu-strip (for discarding
 symbols), eu-readelf (to see the raw ELF file structures), and eu-elflint
 (to check for well-formed ELF files).

elfutils-dbgsym: debug symbols for elfutils
libasm-dev: libasm development libraries and header files

 libasm1 allows you to create ELF files on a low level.
 .
 This package contains development libraries and header files for libasm1.

libasm1: library with a programmable assembler interface

 The libasm1 package provides a library with a programmable assembler
 interface. It allows you to create ELF files on a low level.
 .
 This library is part of elfutils.

libasm1-dbgsym: debug symbols for libasm1
libdw-dev: libdw1 development libraries and header files

 libdw1 provides a library that provides access to DWARF debug information
 stored inside ELF files.
 .
 This package contains development libraries and header files for libdw1.
 .
 It also contains a static version of libdw. Only link to the static version
 for special cases and when you don't need anything from the ebl backends.

libdw1: library that provides access to the DWARF debug information

 libdw1 provides a library that provides access to DWARF debug information
 stored inside ELF files.
 .
 This library is part of elfutils.

libdw1-dbgsym: debug symbols for libdw1
libelf-dev: libelf1 development libraries and header files

 libelf1 provides a shared library which allows reading and writing of ELF
 files on a high level.
 .
 This package contains development libraries and header files for libelf1.

libelf1: library to read and write ELF files

 The libelf1 package provides a shared library which allows reading and
 writing ELF files on a high level. Third party programs depend on
 this package to read internals of ELF files. The programs of the
 elfutils package use it also to generate new ELF files.
 .
 This library is part of elfutils.

libelf1-dbgsym: debug symbols for libelf1