Stay Secure with the Latest Linux Advisories

security advisoryfedorabug fix

Fedora 22 FEDORA-2015-10370 Critical: Elfutils Hardening Issues

Update to 0.163. Hardening fixes. Updated eu-addr2line utility. Various bug fixes. Updated translations. Update to 0.162. Hardening fixes. Updated eu-addr2line utility. Various bug fixes.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-10370 2015-06-20 13:47:29 -------------------------------------------------------------------------------- Name : elfutils Product : Fedora 22 Version : 0.163 Release : 1.fc22 URL : https://sourceware.org/elfutils/ Summary : A collection of utilities and DSOs to handle compiled objects Description : Elfutils is a collection of utilities, including stack (to show backtraces), nm (for listing symbols from object files), size (for listing the section sizes of an object or archive file), strip (for discarding symbols), readelf (to see the raw ELF file structures), and elflint (to check for well-formed ELF files). -------------------------------------------------------------------------------- Update Information: Update to 0.163. Hardening fixes. Updated eu-addr2line utility. Various bug fixes. Updated translations. Update to 0.162. Hardening fixes. Updated eu-addr2line utility. Various bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 19 2015 Mark Wielaard - 0.163-1 - Update to 0.163 - Drop elfutils-0.162-ftruncate-allocate.patch * Tue Jun 16 2015 Mark Wielaard - 0.162-2 - Add elfutils-0.162-ftruncate-allocate.patch (#1232206) * Thu Jun 11 2015 Mark Wielaard - 0.162-1 - Update to 0.162 (#1170810, #1139815, #1129756, #1020842) - Include elfutils/known-dwarf.h - Drop BuildRequires glibc-headers (#1230468) - Removed integrated upstream patches: - elfutils-0.161-aarch64relro.patch - elfutils-0.161-copyreloc.patch - elfutils-0.161-addralign.patch - elfutils-0.161-ar-long-name.patch - elfutils-0.161-formref-type.patch * Sat May 2 2015 Kalev Lember - 0.161-8 - Rebuilt for GCC 5 C++11 ABI change * MonMar 23 2015 Mark Wielaard - 0.161-7 - Add elfutils-0.161-aarch64relro.patch (#1201778) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1232206 - sizeof - kernel core/modules x 10 https://bugzilla.redhat.com/show_bug.cgi?id=1232206 [ 2 ] Bug #1231454 - Updated Polish translation https://bugzilla.redhat.com/show_bug.cgi?id=1231454 [ 3 ] Bug #1230798 - run-elflint-self test failure with 0.162 with --enable-gcov https://bugzilla.redhat.com/show_bug.cgi?id=1230798 [ 4 ] Bug #1170810 - Fuzzing elfutils -- various badness https://bugzilla.redhat.com/show_bug.cgi?id=1170810 [ 5 ] Bug #1139815 - Ukrainian translation update https://bugzilla.redhat.com/show_bug.cgi?id=1139815 [ 6 ] Bug #1129756 - Unwinding core fails in vDSO frame when elf_begin is called with ELF_C_READ https://bugzilla.redhat.com/show_bug.cgi?id=1129756 [ 7 ] Bug #1020842 - libelf: segment fault on x86-64 while file's bss offset have a large number https://bugzilla.redhat.com/show_bug.cgi?id=1020842 [ 8 ] Bug #1230468 - BuildRequires on glibc-devel not glibc-headers. https://bugzilla.redhat.com/show_bug.cgi?id=1230468 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update elfutils' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Fedora 22 libxml2 security fix improves resilience and resolves issues relatedto parsing and validation errors.. Fedora Update,hardened utilities,security updates,elfutils fix. . Severity: Critical. LinuxSecurity.com Team

Jun 30, 2015 •Critical Fedora