UbuntuUpdates.org

Package "binutils-riscv64-linux-gnu-dbg"

Name: binutils-riscv64-linux-gnu-dbg

Description:

GNU binary utilities, for riscv64-linux-gnu target (debug symbols)
Latest version: 2.34-6ubuntu1.11
Release: focal (20.04)
Level: updates
Repository: universe
Head package: binutils
Homepage: https://www.gnu.org/software/binutils/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "binutils-riscv64-linux-gnu-dbg"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "binutils-riscv64-linux-gnu-dbg" in Focal

Repository Area Version
base universe 2.34-6ubuntu1
security universe 2.34-6ubuntu1.11

Changelog

Version: 2.34-6ubuntu1.6 2023-06-13 21:07:19 UTC

  binutils (2.34-6ubuntu1.6) focal-security; urgency=medium

  * SECURITY UPDATE: possible denial of service via heap overflow
    - debian/patches/CVE-2021-45078.patch: fix bounds checking in
      binutils/stabs.c.
    - CVE-2021-45078

 -- Marc Deslauriers <email address hidden> Tue, 13 Jun 2023 09:53:18 -0400
Source diff to previous version
CVE-2021-45078 stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibl

Version: 2.34-6ubuntu1.5 2023-05-24 12:07:31 UTC

  binutils (2.34-6ubuntu1.5) focal-security; urgency=medium

  * SECURITY UPDATE: out-of-bound read vulnerability
    - debian/patches/CVE-2023-25584.patch: Lack of bounds checking in
      vms-alpha.c parse_module
    - CVE-2023-25584
  * SECURITY UPDATE: segmentation fault due to uninitialized `file_table`
    - debian/patches/CVE-2023-25585.patch: Use bfd_zmalloc to alloc
      file_table
    - CVE-2023-25585
  * SECURITY UPDATE: segmentation fault due to uninitialized `the_bfd`
    - debian/patches/CVE-2023-25588.patch: Field `the_bfd` of `asymbol` is
      uninitialised
    - CVE-2023-25588

 -- Nishit Majithia <email address hidden> Mon, 22 May 2023 08:11:49 +0530
Source diff to previous version
CVE-2023-25584 RESERVED
CVE-2023-25585 RESERVED
CVE-2023-25588 RESERVED

Version: 2.34-6ubuntu1.4 2022-12-05 21:07:30 UTC

  binutils (2.34-6ubuntu1.4) focal-security; urgency=medium

  * SECURITY UPDATE: Heap-buffer-overflow
    - debian/patches/CVE-2022-38533.patch: strip possibly
      heap-buffer-overflow in bfd/coffcode.h.
    - CVE-2022-38533

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 30 Aug 2022 09:53:48 -0300
Source diff to previous version
CVE-2022-38533 In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new v

Version: 2.34-6ubuntu1.3 2021-10-25 18:06:33 UTC

  binutils (2.34-6ubuntu1.3) focal-security; urgency=medium

  * SECURITY UPDATE: Use after free in bfd_hash_lookup
    - debian/patches/CVE-2020-16592.patch: don't use a pointer into strings
      that may be freed for section name in bfd/peXXigen.c.
    - CVE-2020-16592
  * SECURITY UPDATE: DoS via memory consumption in DWARF debug sections
    - debian/patches/CVE-2021-3487.patch: check for debug sections with
      excessive sizes in bfd/dwarf2.c.
    - CVE-2021-3487

 -- Marc Deslauriers <email address hidden> Wed, 20 Oct 2021 07:09:55 -0400
Source diff to previous version
CVE-2020-16592 A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm
CVE-2021-3487 There's a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with BFD, and

Version: 2.34-6ubuntu1.1 2021-02-18 11:07:12 UTC

  binutils (2.34-6ubuntu1.1) focal; urgency=medium

  * Backporting upstream commit 26b6ab7a0e to accept vector alignment
    hints on z13 (LP: #1889742)

 -- William 'jawn-smith' Wilson <email address hidden> Thu, 21 Jan 2021 09:23:33 -0600
1889742 [UBUNTU 20.04] Accept vector alignment hints on z13 (binutils)


About   -   Send Feedback to @ubuntu_updates