[SECURITY] [DSA 3123-1] binutils security update

2015-01-0920:52:35

lists.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.5%

JSON

Debian Security Advisory DSA-3123-1 [email protected]
http://www.debian.org/security/ Luciano Bello
January 09, 2015 http://www.debian.org/security/faq

Package : binutils
CVE ID : CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 CVE-2014-8502
CVE-2014-8503 CVE-2014-8504 CVE-2014-8737 CVE-2014-8738

Multiple security issues have been found in binutils, a toolbox for
binary file manipulation. These vulnerabilities include multiple memory
safety errors, buffer overflows, use-after-frees and other implementation
errors
may lead to the execution of arbitrary code, the bypass of security
restrictions, path traversal attack or denial of service.

For the stable distribution (wheezy), these problems have been fixed in
version 2.22-8+deb7u2.

For the unstable distribution (sid), this problem has been fixed in
version 2.25-3.

We recommend that you upgrade your binutils packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6i386binutils-multiarch< 2.20.1-16+deb6u1binutils-multiarch_2.20.1-16+deb6u1_i386.deb
Debian7armelbinutils-mingw-w64-i686< 2.22-8+deb7u2+2+deb7u1binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_armel.deb
Debian7s390xbinutils-multiarch< 2.22-8+deb7u2binutils-multiarch_2.22-8+deb7u2_s390x.deb
Debian7i386binutils-dev< 2.22-8+deb7u2binutils-dev_2.22-8+deb7u2_i386.deb
Debian7mipselbinutils-multiarch< 2.22-8+deb7u2binutils-multiarch_2.22-8+deb7u2_mipsel.deb
Debian7mipselbinutils-mingw-w64-i686< 2.22-8+deb7u2+2+deb7u1binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_mipsel.deb
Debian7kfreebsd-i386binutils-dev< 2.22-8+deb7u2binutils-dev_2.22-8+deb7u2_kfreebsd-i386.deb
Debian7allbinutils-mingw-w64< 2.22-8+deb7u2+2+deb7u1binutils-mingw-w64_2.22-8+deb7u2+2+deb7u1_all.deb
Debian7amd64binutils-multiarch< 2.22-8+deb7u2binutils-multiarch_2.22-8+deb7u2_amd64.deb
Debian7powerpcbinutils-spu< 2.22-8+deb7u2binutils-spu_2.22-8+deb7u2_powerpc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	i386	binutils-multiarch	< 2.20.1-16+deb6u1	binutils-multiarch_2.20.1-16+deb6u1_i386.deb
Debian	7	armel	binutils-mingw-w64-i686	< 2.22-8+deb7u2+2+deb7u1	binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_armel.deb
Debian	7	s390x	binutils-multiarch	< 2.22-8+deb7u2	binutils-multiarch_2.22-8+deb7u2_s390x.deb
Debian	7	i386	binutils-dev	< 2.22-8+deb7u2	binutils-dev_2.22-8+deb7u2_i386.deb
Debian	7	mipsel	binutils-multiarch	< 2.22-8+deb7u2	binutils-multiarch_2.22-8+deb7u2_mipsel.deb
Debian	7	mipsel	binutils-mingw-w64-i686	< 2.22-8+deb7u2+2+deb7u1	binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_mipsel.deb
Debian	7	kfreebsd-i386	binutils-dev	< 2.22-8+deb7u2	binutils-dev_2.22-8+deb7u2_kfreebsd-i386.deb
Debian	7	all	binutils-mingw-w64	< 2.22-8+deb7u2+2+deb7u1	binutils-mingw-w64_2.22-8+deb7u2+2+deb7u1_all.deb
Debian	7	amd64	binutils-multiarch	< 2.22-8+deb7u2	binutils-multiarch_2.22-8+deb7u2_amd64.deb
Debian	7	powerpc	binutils-spu	< 2.22-8+deb7u2	binutils-spu_2.22-8+deb7u2_powerpc.deb