[CLSA-2023:1696877581] binutils: Fix of 9 CVEs
Type:
security
Severity:
Important
Release date:
2023-10-09
Description:
- CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c
Updated packages:
  • binutils-2.27-44.base.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:db3088e64f1b1e386ac79846298123538eec6c61
  • binutils-devel-2.27-44.base.el7_9.1.tuxcare.els1.i686.rpm
    sha:59bb18516a3dba44d119fd06708c2662661788a0
  • binutils-devel-2.27-44.base.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:acbfd87fbe8a031e1250a8727a372923a920753e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.