Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in binutils
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in binutils
ID: USN-4336-1
Distribution: Ubuntu
Plattformen: Ubuntu 18.04 LTS
Datum: Mi, 22. April 2020, 15:15
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12972
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12641
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20002
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17985
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19932
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18700
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9071
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9070
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8945
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18309
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12697
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10372
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9073
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18484
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17360
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14250
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18606
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000876
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20623
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17358
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9138
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17451
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17359
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20651
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12698
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12699
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20671
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12934
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13033
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18607
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19931
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10535
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14444
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9074
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10373
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12700
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9075
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18605
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9077
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18701
Applikationen: binutils

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============7336135373994870452==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="PMfs7pipGodmq951RCyKBnGTaMOvpzTAv"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--PMfs7pipGodmq951RCyKBnGTaMOvpzTAv
Content-Type: multipart/mixed;
boundary="168TqbbwWbYdjxPixj24T7bYWNJGXc1vY"

--168TqbbwWbYdjxPixj24T7bYWNJGXc1vY
Content-Type: text/plain; charset=utf-8
Content-Language: en-C
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-4336-1
April 22, 2020

binutils vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in GNU binutils.

Software Description:
- binutils: GNU assembler, linker and binary utilities

Details:

It was discovered that GNU binutils contained a large number of security
issues. If a user or automated system were tricked into processing a
specially-crafted file, a remote attacker could cause GNU binutils to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
binutils 2.30-21ubuntu1~18.04.3
binutils-multiarch 2.30-21ubuntu1~18.04.3

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4336-1
CVE-2018-1000876, CVE-2018-10372, CVE-2018-10373, CVE-2018-10534,
CVE-2018-10535, CVE-2018-12641, CVE-2018-12697, CVE-2018-12698,
CVE-2018-12699, CVE-2018-12700, CVE-2018-12934, CVE-2018-13033,
CVE-2018-17358, CVE-2018-17359, CVE-2018-17360, CVE-2018-17794,
CVE-2018-17985, CVE-2018-18309, CVE-2018-18483, CVE-2018-18484,
CVE-2018-18605, CVE-2018-18606, CVE-2018-18607, CVE-2018-18700,
CVE-2018-18701, CVE-2018-19931, CVE-2018-19932, CVE-2018-20002,
CVE-2018-20623, CVE-2018-20651, CVE-2018-20671, CVE-2018-8945,
CVE-2018-9138, CVE-2019-12972, CVE-2019-14250, CVE-2019-14444,
CVE-2019-17450, CVE-2019-17451, CVE-2019-9070, CVE-2019-9071,
CVE-2019-9073, CVE-2019-9074, CVE-2019-9075, CVE-2019-9077

Package Information:
https://launchpad.net/ubuntu/+source/binutils/2.30-21ubuntu1~18.04.3


--168TqbbwWbYdjxPixj24T7bYWNJGXc1vY--

--PMfs7pipGodmq951RCyKBnGTaMOvpzTAv
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=ezvY
-----END PGP SIGNATURE-----

--PMfs7pipGodmq951RCyKBnGTaMOvpzTAv--


--===============7336135373994870452==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============7336135373994870452==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung