USN-4012-1: elfutils vulnerabilities
10 June 2019
Several security issues were fixed in elfutils.
Releases
Packages
- elfutils - collection of utilities to handle ELF objects
Details
It was discovered that elfutils incorrectly handled certain malformed
files. If a user or automated system were tricked into processing a
specially crafted file, elfutils could be made to crash or consume
resources, resulting in a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.10
-
elfutils
-
0.170-0.5.0ubuntu1.1
-
libasm1
-
0.170-0.5.0ubuntu1.1
-
libdw1
-
0.170-0.5.0ubuntu1.1
-
libelf1
-
0.170-0.5.0ubuntu1.1
Ubuntu 18.04
-
elfutils
-
0.170-0.4ubuntu0.1
-
libasm1
-
0.170-0.4ubuntu0.1
-
libdw1
-
0.170-0.4ubuntu0.1
-
libelf1
-
0.170-0.4ubuntu0.1
Ubuntu 16.04
-
elfutils
-
0.165-3ubuntu1.2
-
libasm1
-
0.165-3ubuntu1.2
-
libdw1
-
0.165-3ubuntu1.2
-
libelf1
-
0.165-3ubuntu1.2
In general, a standard system update will make all the necessary changes.