Summary
[0.176-2]
- Add elfutils-0.176-xlate-note.patch (#1704754)
[0.176-1]
- New upstream release (#1676504)
CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
CVE-2019-7664, CVE-2019-7665, CVE-2018-16062, CVE-2018-16402,
CVE-2018-16403, CVE-2018-18310, CVE-2018-18521, CVE-2018-18520.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | elfutils | 0:0.176-2.el7 |
| Oracle Linux · 7 | elfutils-default-yama-scope | 0:0.176-2.el7 |
| Oracle Linux · 7 | elfutils-devel | 0:0.176-2.el7 |
| Oracle Linux · 7 | elfutils-devel-static | 0:0.176-2.el7 |
| Oracle Linux · 7 | elfutils-libelf | 0:0.176-2.el7 |
| Oracle Linux · 7 | elfutils-libelf-devel | 0:0.176-2.el7 |
| Oracle Linux · 7 | elfutils-libelf-devel-static | 0:0.176-2.el7 |
| Oracle Linux · 7 | elfutils-libs | 0:0.176-2.el7 |
Vulnerabilities 10
-
Unscored —
dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial…
-
Unscored —
libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application cr…
-
Unscored —
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and d…
-
Unscored —
An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.…
-
Unscored —
An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-…
-
Unscored —
Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers …
-
Unscored —
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils …
-
Unscored —
An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf3…
-
Unscored —
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect …
-
Unscored —
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in l…