Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

Fedora 24: Security Advisory Libdwarf Critical Flaws Resolved

fedora
Calendar Grey October 9, 2016
Dist Fedora Esm H88
The Libdwarf library has been updated to fix critical vulnerabilities in Fedora 24, boosting both its security and reliability.
Update to 20160929 upstream release

Summary

Library to access the DWARF debugging file format which supports

source level debugging of a number of procedural languages, such as C, C++,

and Fortran. Please see https://dwarfstd.org/ for DWARF specification.

Update Information:

Update to 20160929 upstream release

Topics%20covered

Topics Covered

security advisory Fedora heap overflow integer overflow critical flaw out-of-bounds read libdwarf

Change Log

References


[ 1 ] Bug #1378719 - CVE-2016-7510 libdwarf: Out-of-bounds read in read_line_table_program [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1378719 [ 2 ] Bug #1377107 - libdwarf Integer Overflow https://bugzilla.redhat.com/show_bug.cgi?id=1377107 [ 3 ] Bug #1376362 - CVE-2016-7410 libdwarf: Heap buffer overflow in _dwarf_read_loc_section [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1376362 [ 4 ] Bug #1379019 - libdwarf-20160923 is available https://bugzilla.redhat.com/show_bug.cgi?id=1379019 [ 5 ] Bug #1380556 - libdwarf-20160929 is available https://bugzilla.redhat.com/show_bug.cgi?id=1380556

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libdwarf' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libdwarf
Product: Fedora 24
Version: 20160929
Release: 1.fc24
URL: https://www.prevanders.net/dwarf.html
Summary: Library to access the DWARF Debugging file format

Topics%20covered

Topics Covered

security advisory Fedora heap overflow integer overflow critical flaw out-of-bounds read libdwarf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.