Lucene search

K
oraclelinuxOracleLinuxELSA-2019-2075
HistoryAug 13, 2019 - 12:00 a.m.

binutils security and bug fix update

2019-08-1300:00:00
linux.oracle.com
18

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

74.6%

[2.27-41.base.0.1]

  • Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598
    Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error
    [Orabug 27930573]
  • Reviewed-by: Jose E. Marchesi
    [2.27-41.base]
  • Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)
    [2.27-40.base]
  • Enable gold for PowerPC and s390x. (#1670014)
    [2.27-39.base]
  • Fix a potential illegal memory access triggered by an integer overflow. (#1665884)
    [2.27-38.base]
  • Disable optimizations of x06_64 PLT entries. (#1624779)
    [2.27-37.base]
  • Add the .attach-to-group pseudo-op to the assembler. (#1652587)
    [2.27-36.base]
  • Prevent resource exhaustion attacks on libibertys name demangling code. (#1598561)
    [2.27-35.base]
  • Stop strip crashing when removing .comment sections. (#1644632)

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

74.6%