Advisories » MGASA-2018-0027

Updated elfutils packages fix security vulnerabilities

Publication date: 03 Jan 2018
Modification date: 03 Jan 2018
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-10254 , CVE-2016-10255 , CVE-2017-7607 , CVE-2017-7608 , CVE-2017-7609 , CVE-2017-7610 , CVE-2017-7611 , CVE-2017-7612 , CVE-2017-7613

Description

The elfutils package has been updated to version 0.169 to fix several bugs
that can lead to memory allocation failures or heap overflows
(CVE-2016-10254, CVE-2016-10255, CVE-2017-7607, CVE-2017-7608,
CVE-2017-7609, CVE-2017-7610, CVE-2017-7611, CVE-2017-7612,
CVE-2017-7613).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=20557
• http://openwall.com/lists/oss-security/2017/03/22/2
• http://openwall.com/lists/oss-security/2017/03/22/1
• http://openwall.com/lists/oss-security/2017/04/10/8
• http://openwall.com/lists/oss-security/2017/04/10/9
• http://openwall.com/lists/oss-security/2017/04/10/11
• http://openwall.com/lists/oss-security/2017/04/10/12
• http://openwall.com/lists/oss-security/2017/04/10/13
• http://openwall.com/lists/oss-security/2017/04/10/14
• http://openwall.com/lists/oss-security/2017/04/10/15
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10254
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10255
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7607
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7608
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7609
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7610
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7611
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7612
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7613

SRPMS

5/core

• elfutils-0.169-1.mga5