Ubuntu
elfutils package

elfutils 0.165-3ubuntu1.2 source package in Ubuntu

Changelog

elfutils (0.165-3ubuntu1.2) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS via a crafted file
    - debian/patches/CVE-2018-16062.patch: make sure there is enough data
      to read full aranges header in libdw/dwarf_getaranges.c,
      src/readelf.c.
    - CVE-2018-16062
  * SECURITY UPDATE: double free and application crash
    - debian/patches/CVE-2018-16402.patch: return error if elf_compress_gnu
      is used on SHF_COMPRESSED section in libelf/elf_compress_gnu.c,
      libelf/libelf.h.
    - CVE-2018-16402
  * SECURITY UPDATE: incorrect end of the attributes list check
    - debian/patches/CVE-2018-16403.patch: check end of attributes list
      consistently in libdw/dwarf_getabbrev.c, libdw/dwarf_hasattr.c.
    - CVE-2018-16403
  * SECURITY UPDATE: invalid memory address dereference
    - debian/patches/CVE-2018-18310.patch: sanity check partial core file
      data reads in libdwfl/dwfl_segment_report_module.c.
    - CVE-2018-18310
  * SECURITY UPDATE: invalid memory address dereference
    - debian/patches/CVE-2018-18520.patch: handle recursive ELF ar files in
      src/size.c.
    - CVE-2018-18520
  * SECURITY UPDATE: divide by zero vulnerabilties
    - debian/patches/CVE-2018-18521.patch: check that sh_entsize isn't zero
      in src/arlib.c.
    - CVE-2018-18521
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2019-7149.patch: check terminating NUL byte in
      dwarf_getsrclines for dir/file table in libdw/dwarf_getsrclines.c,
      src/readelf.c.
    - CVE-2019-7149
  * SECURITY UPDATE: incorrect truncated dyn data read handling
    - debian/patches/CVE-2019-7150.patch: sanity check partial core file
      dyn data read in libdwfl/dwfl_segment_report_module.c.
    - CVE-2019-7150
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2019-7665.patch: check NT_PLATFORM core notes
      contain a zero terminated string in libdwfl/linux-core-attach.c,
      libebl/eblcorenote.c, libebl/libebl.h, src/readelf.c.
    - CVE-2019-7665

 -- Marc Deslauriers <email address hidden>  Fri, 07 Jun 2019 12:37:02 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates main libs
Xenial security main libs

Downloads

File Size SHA-256 Checksum
elfutils_0.165.orig.tar.bz2 6.2 MiB a7fc9277192caaa5f30b47e8c0518dbcfd8c4a19c6493a63d511d804290ce972
elfutils_0.165-3ubuntu1.2.debian.tar.xz 50.8 KiB 906e73b2e35b173731270d3bdd486a738670f9854740c352a49e5d72af03a08a
elfutils_0.165-3ubuntu1.2.dsc 2.3 KiB 4219dab089e2857bb391e6e844d45fb40f841daf0e5aaf352f41893b991a4431

View changes file

Binary packages built by this source

elfutils: collection of utilities to handle ELF objects

 Elfutils is a collection of utilities, including eu-ld (a linker),
 eu-nm (for listing symbols from object files), eu-size (for listing the
 section sizes of an object or archive file), eu-strip (for discarding
 symbols), eu-readelf (to see the raw ELF file structures), and eu-elflint
 (to check for well-formed ELF files).

elfutils-dbgsym: debug symbols for package elfutils

 Elfutils is a collection of utilities, including eu-ld (a linker),
 eu-nm (for listing symbols from object files), eu-size (for listing the
 section sizes of an object or archive file), eu-strip (for discarding
 symbols), eu-readelf (to see the raw ELF file structures), and eu-elflint
 (to check for well-formed ELF files).

libasm-dev: libasm development libraries and header files

 libasm1 allows you to create ELF files on a low level.
 .
 This package contains development libraries and header files for libasm1.

libasm1: library with a programmable assembler interface

 The libasm1 package provides a library with a programmable assembler
 interface. It allows you to create ELF files on a low level.
 .
 This library is part of elfutils.

libasm1-dbgsym: debug symbols for package libasm1

 The libasm1 package provides a library with a programmable assembler
 interface. It allows you to create ELF files on a low level.
 .
 This library is part of elfutils.

libdw-dev: libdw1 development libraries and header files

 libdw1 provides a library that provides access to DWARF debug information
 stored inside ELF files.
 .
 This package contains development libraries and header files for libdw1.
 .
 It also contains a static version of libdw. Only link to the static version
 for special cases and when you don't need anything from the ebl backends.

libdw1: library that provides access to the DWARF debug information

 libdw1 provides a library that provides access to DWARF debug information
 stored inside ELF files.
 .
 This library is part of elfutils.

libdw1-dbgsym: debug symbols for package libdw1

 libdw1 provides a library that provides access to DWARF debug information
 stored inside ELF files.
 .
 This library is part of elfutils.

libelf-dev: libelf1 development libraries and header files

 libelf1 provides a shared library which allows reading and writing of ELF
 files on a high level.
 .
 This package contains development libraries and header files for libelf1.

libelf1: library to read and write ELF files

 The libelf1 package provides a shared library which allows reading and
 writing ELF files on a high level. Third party programs depend on
 this package to read internals of ELF files. The programs of the
 elfutils package use it also to generate new ELF files.
 .
 This library is part of elfutils.

libelf1-dbgsym: debug symbols for package libelf1

 The libelf1 package provides a shared library which allows reading and
 writing ELF files on a high level. Third party programs depend on
 this package to read internals of ELF files. The programs of the
 elfutils package use it also to generate new ELF files.
 .
 This library is part of elfutils.