Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
89
security advisorymoderatefedoraFedora 40: FEDORA-2024-60627905b6 Moderate: Libdwarf Crash Fix
Update to latest upstream release.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-60627905b6 2024-04-19 21:20:20.797649 -------------------------------------------------------------------------------- Name : libdwarf Product : Fedora 40 Version : 0.9.2 Release : 1.fc40 URL : https://www.prevanders.net/dwarf.html Summary : Library to access the DWARF Debugging file format Description : Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see https://dwarfstd.org/ for DWARF specification. -------------------------------------------------------------------------------- Update Information: Update to latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 2 2024 Tom Hughes - 1:0.9.2-1 - Update to 0.9.2 upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #2267720 - CVE-2024-2002 libdwarf: crashes randomly on fuzzed object [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2267720 [ 2 ] Bug #2272716 - libdwarf-0.9.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272716 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-60627905b6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 19, 2024
Fedora
89
security advisorycritical issueupdateFedora 37 FEDORA-2022-273a86adf0 Critical: Libdwarf Double Free
Update to latest upstream release. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-273a86adf0 2022-09-18 00:16:39.903655 --------------------------------------------------------------------------------Name : libdwarf Product : Fedora 37 Version : 0.4.2 Release : 1.fc37 URL : https://www.prevanders.net/dwarf.html Summary : Library to access the DWARF Debugging file format Description : Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see https://dwarfstd.org/ for DWARF specification. --------------------------------------------------------------------------------Update Information: Update to latest upstream release --------------------------------------------------------------------------------ChangeLog: * Tue Sep 13 2022 Tom Hughes - 1:0.4.2-1 - Update to 0.4.2 upstream release --------------------------------------------------------------------------------References: [ 1 ] Bug #2126426 - CVE-2022-39170 libdwarf: double free in _dwarf_exec_frame_instr() in dwarf_frame.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2126426 [ 2 ] Bug #2126518 - libdwarf-0.4.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2126518 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-273a86adf0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 17, 2022
•Critical
Fedora
202
security advisoryinstallation instructionslow severityopenSUSE Leap 15.2 Advisory: 2021:0619-1 Low Severity Libdwarf Patch
An update that contains security fixes can now be installed. . openSUSE Security Update: Security update for libdwarf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0619-1 Rating: low References: #1185057 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libdwarf fixes the following issues: - Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-619=1 Package List: - openSUSE Leap 15.2 (x86_64): libdwarf-debuginfo-20161124-lp152.4.3.1 libdwarf-debugsource-20161124-lp152.4.3.1 libdwarf-devel-20161124-lp152.4.3.1 libdwarf-devel-debuginfo-20161124-lp152.4.3.1 libdwarf-devel-static-20161124-lp152.4.3.1 libdwarf-doc-20161124-lp152.4.3.1 libdwarf-tools-20161124-lp152.4.3.1 libdwarf-tools-debuginfo-20161124-lp152.4.3.1 libdwarf1-20161124-lp152.4.3.1 libdwarf1-debuginfo-20161124-lp152.4.3.1 References: https://bugzilla.suse.com/1185057 . Apply the latest openSUSE security patch for libdwarf. The update addresses minor vulnerabilities and outlines installation guidelines for users.. openSUSE Libdwarf Update, Package Hardening. . Severity: Low. LinuxSecurity.com Team
Apr 25, 2021
•Low
OpenSUSE
203
security advisorydenial of servicesecurity updateMageia 7: MGASA-2020-0017 Critical: Libdwarf Denial of Service
Updated libdwarf packages fix security vulnerability: dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump . MGASA-2020-0017 - Updated libdwarf packages fix security vulnerability Publication date: 05 Jan 2020 URL: https://advisories.mageia.org/MGASA-2020-0017.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-14249 Updated libdwarf packages fix security vulnerability: dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackersto cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump (CVE-2019-14249). References: - https://bugs.mageia.org/show_bug.cgi?id=25955 - https://lists.fedoraproject.org/archives/list/
Jan 05, 2020
•Critical
Mageia
89
security advisoryDoS issueFedoraFedora 31: FEDORA-2019-4fa597c615 critical: libdwarf DoS Fix
Update to latest upstream release. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-4fa597c615 2019-10-08 00:07:07.442506 --------------------------------------------------------------------------------Name : libdwarf Product : Fedora 31 Version : 20191002 Release : 1.fc31 URL : https://www.prevanders.net/dwarf.html Summary : Library to access the DWARF Debugging file format Description : Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see https://dwarfstd.org/ for DWARF specification. --------------------------------------------------------------------------------Update Information: Update to latest upstream release --------------------------------------------------------------------------------References: [ 1 ] Bug #1732720 - CVE-2019-14249 libdwarf: division by zero in dwarf_elf_load_headers.c leading to DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1732720 [ 2 ] Bug #1758409 - libdwarf-20191002 is available https://bugzilla.redhat.com/show_bug.cgi?id=1758409 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-4fa597c615' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Oct 07, 2019
•Critical
Fedora
198
security advisorydenial of servicelow severityArch Linux: 201707-7 Low Severity Libdwarf Denial of Service
The package libdwarf before version 20170709-1 is vulnerable to denial of service. . Arch Linux Security Advisory ASA-201707-7 ======================================== Severity: Low Date : 2017-07-11 CVE-ID : CVE-2017-9998 Package : libdwarf Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-332 Summary ====== The package libdwarf before version 20170709-1 is vulnerable to denial of service. Resolution ========= Upgrade to 20170709-1. # pacman -Syu "libdwarf> =20170709-1" The problem has been fixed upstream in version 20170709. Workaround ========= None. Description ========== The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows attackers to cause a denial of service (Segmentation fault) via a crafted file. Impact ===== An attacker can cause a denial of service by tricking a local user into submitting a crafted file to a program linked against libdwarf. References ========= https://bugzilla.redhat.com/show_bug.cgi?id=1465756 https://security.archlinux.org/CVE-2017-9998 . Arch Linux has announced a potential libdwarf vulnerability, classified as low severity denial of service. Users are advised to upgrade to the latest version promptly. libdwarf, denial of service, arch linux security. . Severity: Low. LinuxSecurity.com Team
Jul 11, 2017
•Low
ArchLinux
89
security advisorycriticalFedoraFedora 26: 2017-961cd53028 Critical: libdwarf Debugging Issue
Update to libdward 20170416. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-961cd53028 2017-04-30 00:17:25.883897 --------------------------------------------------------------------------------Name : libdwarf Product : Fedora 26 Version : 20170416 Release : 1.fc26 URL : https://www.prevanders.net/dwarf.html Summary : Library to access the DWARF Debugging file format Description : Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see https://dwarfstd.org/ for DWARF specification. --------------------------------------------------------------------------------Update Information: Update to libdward 20170416 --------------------------------------------------------------------------------References: [ 1 ] Bug #1442649 - libdwarf-20170416 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442649 [ 2 ] Bug #1399992 - CVE-2016-9275 CVE-2016-9276 CVE-2016-9480 CVE-2016-9558 libdwarf: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1399992 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libdwarf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Apr 30, 2017
•Critical
Fedora
89
security advisorycriticalsoftware updateFedora 25: Critical libdwarf Update for Multiple Security Issues
Update to libdward 20170416. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-15e7445d67 2017-04-25 12:27:28.413174 --------------------------------------------------------------------------------Name : libdwarf Product : Fedora 25 Version : 20170416 Release : 1.fc25 URL : https://www.prevanders.net/dwarf.html Summary : Library to access the DWARF Debugging file format Description : Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see https://dwarfstd.org/ for DWARF specification. --------------------------------------------------------------------------------Update Information: Update to libdward 20170416 --------------------------------------------------------------------------------References: [ 1 ] Bug #1399992 - CVE-2016-9275 CVE-2016-9276 CVE-2016-9480 CVE-2016-9558 libdwarf: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1399992 [ 2 ] Bug #1442649 - libdwarf-20170416 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442649 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libdwarf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Apr 25, 2017
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!