Synopsis

elfutils security update

Type/Severity

Security Advisory: Low

Topic

Updated elfutils packages that address a minor security issue and various
other issues are now available.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Description

The elfutils packages contain a number of utility programs and libraries
related to the creation and maintenance of executable code.

The elfutils packages that originally shipped with Red Hat Enterprise Linux 4
were GPL-licensed versions which lacked some functionality. Previous
updates provided fully functional versions of elfutils only under the OSL
license. This update provides a fully functional, GPL-licensed version of
elfutils.

In the OSL-licensed elfutils versions provided in previous updates, some
tools could sometimes crash when given corrupted input files. (CVE-2005-1704)

Also, when the eu-strip tool was used to create separate debuginfo files
from relocatable objects such as kernel modules (.ko), the resulting
debuginfo files (.ko.debug) were sometimes corrupted. Both of these
problems are fixed in the new version.

Users of elfutils should upgrade to these updated packages, which resolve
these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL
Certificate Errors, you need to install a version of the
up2date client with an updated certificate. The latest version of
up2date is available from the Red Hat FTP site and may also be
downloaded directly from the RHN website:

https://rhn.redhat.com/help/latest-up2date.pxt

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 156342 - eu-strip mangles separate debuginfo with relocation sections
• BZ - 159888 - CVE-2005-1704 Integer overflow in libelf
• BZ - 186992 - Elfutils license upgrade

CVEs

• CVE-2005-1704

References

• http://www.redhat.com/security/updates/classification/#low

Red Hat Enterprise Linux Server 4

SRPM
elfutils-0.97.1-3.src.rpm	SHA-256: 3d0d2b9bc586f5e40f84079926b970819040f831e92f489dbc721c3fcebb8a0a
x86_64
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.x86_64.rpm	SHA-256: a9f6379e29bce190c3c82b6854c0b21be23f8a730938b3237e3f8c35cbe1863b
elfutils-0.97.1-3.x86_64.rpm	SHA-256: a9f6379e29bce190c3c82b6854c0b21be23f8a730938b3237e3f8c35cbe1863b
elfutils-devel-0.97.1-3.x86_64.rpm	SHA-256: 86b1e7a4c1a12f00aca565126a101cb8b0753a287a193586ca6a8e68bf8483b7
elfutils-devel-0.97.1-3.x86_64.rpm	SHA-256: 86b1e7a4c1a12f00aca565126a101cb8b0753a287a193586ca6a8e68bf8483b7
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.x86_64.rpm	SHA-256: 091d79a42626287602f4b0b0780e742ccf4d7b240c792584039e995b6a9ae525
elfutils-libelf-0.97.1-3.x86_64.rpm	SHA-256: 091d79a42626287602f4b0b0780e742ccf4d7b240c792584039e995b6a9ae525
elfutils-libelf-devel-0.97.1-3.x86_64.rpm	SHA-256: 6d37cabc51a70bccdcc7b2a77fed6a3f943a0e28d41732af1c1415d3323b2ba9
elfutils-libelf-devel-0.97.1-3.x86_64.rpm	SHA-256: 6d37cabc51a70bccdcc7b2a77fed6a3f943a0e28d41732af1c1415d3323b2ba9
ia64
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.ia64.rpm	SHA-256: c4d07494da414e995a629d86b27a734e85c95f62d930768c31eff337fdc03933
elfutils-0.97.1-3.ia64.rpm	SHA-256: c4d07494da414e995a629d86b27a734e85c95f62d930768c31eff337fdc03933
elfutils-devel-0.97.1-3.ia64.rpm	SHA-256: 99281350c40511e83a853899df997ebb7bb3a449ea660275039093bea3d5dccf
elfutils-devel-0.97.1-3.ia64.rpm	SHA-256: 99281350c40511e83a853899df997ebb7bb3a449ea660275039093bea3d5dccf
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.ia64.rpm	SHA-256: 66caadf67f7c7e9704f3ec73b42a42e7c9a2e2aaa09d57895170231aa2333965
elfutils-libelf-0.97.1-3.ia64.rpm	SHA-256: 66caadf67f7c7e9704f3ec73b42a42e7c9a2e2aaa09d57895170231aa2333965
elfutils-libelf-devel-0.97.1-3.ia64.rpm	SHA-256: 7818bdac77a4c7f35a8b6b0d7658f5b4046f113110be94a387dc19029d5426ea
elfutils-libelf-devel-0.97.1-3.ia64.rpm	SHA-256: 7818bdac77a4c7f35a8b6b0d7658f5b4046f113110be94a387dc19029d5426ea
i386
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-devel-0.97.1-3.i386.rpm	SHA-256: 33264103298aa0e555ae7d7a34e6e4108c2a40dbc152735c3c6df70b0e3e2a84
elfutils-devel-0.97.1-3.i386.rpm	SHA-256: 33264103298aa0e555ae7d7a34e6e4108c2a40dbc152735c3c6df70b0e3e2a84
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-devel-0.97.1-3.i386.rpm	SHA-256: fcfa43dffff046eabfe16d54a4e77373ca3090911d9687a72f1caed5f95a0e98
elfutils-libelf-devel-0.97.1-3.i386.rpm	SHA-256: fcfa43dffff046eabfe16d54a4e77373ca3090911d9687a72f1caed5f95a0e98

Red Hat Enterprise Linux Workstation 4

SRPM
elfutils-0.97.1-3.src.rpm	SHA-256: 3d0d2b9bc586f5e40f84079926b970819040f831e92f489dbc721c3fcebb8a0a
x86_64
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.x86_64.rpm	SHA-256: a9f6379e29bce190c3c82b6854c0b21be23f8a730938b3237e3f8c35cbe1863b
elfutils-devel-0.97.1-3.x86_64.rpm	SHA-256: 86b1e7a4c1a12f00aca565126a101cb8b0753a287a193586ca6a8e68bf8483b7
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.x86_64.rpm	SHA-256: 091d79a42626287602f4b0b0780e742ccf4d7b240c792584039e995b6a9ae525
elfutils-libelf-devel-0.97.1-3.x86_64.rpm	SHA-256: 6d37cabc51a70bccdcc7b2a77fed6a3f943a0e28d41732af1c1415d3323b2ba9
ia64
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.ia64.rpm	SHA-256: c4d07494da414e995a629d86b27a734e85c95f62d930768c31eff337fdc03933
elfutils-devel-0.97.1-3.ia64.rpm	SHA-256: 99281350c40511e83a853899df997ebb7bb3a449ea660275039093bea3d5dccf
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.ia64.rpm	SHA-256: 66caadf67f7c7e9704f3ec73b42a42e7c9a2e2aaa09d57895170231aa2333965
elfutils-libelf-devel-0.97.1-3.ia64.rpm	SHA-256: 7818bdac77a4c7f35a8b6b0d7658f5b4046f113110be94a387dc19029d5426ea
i386
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-devel-0.97.1-3.i386.rpm	SHA-256: 33264103298aa0e555ae7d7a34e6e4108c2a40dbc152735c3c6df70b0e3e2a84
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-devel-0.97.1-3.i386.rpm	SHA-256: fcfa43dffff046eabfe16d54a4e77373ca3090911d9687a72f1caed5f95a0e98

Red Hat Enterprise Linux Desktop 4

SRPM
elfutils-0.97.1-3.src.rpm	SHA-256: 3d0d2b9bc586f5e40f84079926b970819040f831e92f489dbc721c3fcebb8a0a
x86_64
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-0.97.1-3.x86_64.rpm	SHA-256: a9f6379e29bce190c3c82b6854c0b21be23f8a730938b3237e3f8c35cbe1863b
elfutils-devel-0.97.1-3.x86_64.rpm	SHA-256: 86b1e7a4c1a12f00aca565126a101cb8b0753a287a193586ca6a8e68bf8483b7
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-0.97.1-3.x86_64.rpm	SHA-256: 091d79a42626287602f4b0b0780e742ccf4d7b240c792584039e995b6a9ae525
elfutils-libelf-devel-0.97.1-3.x86_64.rpm	SHA-256: 6d37cabc51a70bccdcc7b2a77fed6a3f943a0e28d41732af1c1415d3323b2ba9
i386
elfutils-0.97.1-3.i386.rpm	SHA-256: 85909043c0b616111dcee78fd8806f822fe7025d2554e0a8eaeb0b024eebcc1b
elfutils-devel-0.97.1-3.i386.rpm	SHA-256: 33264103298aa0e555ae7d7a34e6e4108c2a40dbc152735c3c6df70b0e3e2a84
elfutils-libelf-0.97.1-3.i386.rpm	SHA-256: 76cfd01feacf0ff9ee3d462cdd1c00c539c183863ada1225d7e1214d08c6e3c8
elfutils-libelf-devel-0.97.1-3.i386.rpm	SHA-256: fcfa43dffff046eabfe16d54a4e77373ca3090911d9687a72f1caed5f95a0e98

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
elfutils-0.97.1-3.src.rpm	SHA-256: 3d0d2b9bc586f5e40f84079926b970819040f831e92f489dbc721c3fcebb8a0a
s390x
elfutils-0.97.1-3.s390.rpm	SHA-256: 251eee57a45be1ebb4552caff36b1909733ff6840cd6d7b44a8e63d007f24220
elfutils-0.97.1-3.s390x.rpm	SHA-256: 8c0cff570479eaff1b5470d64a66426f0af5e24e59b7d18677ca80b2aff5e028
elfutils-devel-0.97.1-3.s390x.rpm	SHA-256: bede28dcf768dd69303b70c4a7906a390deba8b84e7ec76dd6962fcc3bd7494d
elfutils-libelf-0.97.1-3.s390.rpm	SHA-256: d9f6b15741a1ac923dc147094246f785fa58b7568902997b2025a4b41df970ec
elfutils-libelf-0.97.1-3.s390x.rpm	SHA-256: ccabd98a34891a7120ebf04eb83e2cf713bb04342c1481b164ab1bf7ddd42328
elfutils-libelf-devel-0.97.1-3.s390x.rpm	SHA-256: 7609651990a8f5947679b5c3d7a7bdcc30749b5f3654c43a1af06a006af3de80
s390
elfutils-0.97.1-3.s390.rpm	SHA-256: 251eee57a45be1ebb4552caff36b1909733ff6840cd6d7b44a8e63d007f24220
elfutils-devel-0.97.1-3.s390.rpm	SHA-256: 5026e49d1cd563d55e7d004b6d8e487af2911e1f78f836d5c24cd752c7fc4db7
elfutils-libelf-0.97.1-3.s390.rpm	SHA-256: d9f6b15741a1ac923dc147094246f785fa58b7568902997b2025a4b41df970ec
elfutils-libelf-devel-0.97.1-3.s390.rpm	SHA-256: 5633b561001683d55cc4d87e51b5aaf6d52569ed2afbae5b5d584dbf09e28f91

Red Hat Enterprise Linux for Power, big endian 4

SRPM
elfutils-0.97.1-3.src.rpm	SHA-256: 3d0d2b9bc586f5e40f84079926b970819040f831e92f489dbc721c3fcebb8a0a
ppc
elfutils-0.97.1-3.ppc.rpm	SHA-256: 8fd7e0f96c1b3f6e1e90cee10d6f3649caf936647658d6b1d88474c27f371862
elfutils-0.97.1-3.ppc64.rpm	SHA-256: b9645f82100ba5ee7ed862fcc9250c36a10e2632d9c1614928a45904913f15ab
elfutils-devel-0.97.1-3.ppc.rpm	SHA-256: ed3b6ebf059cc663b81e367d7f587a785c78833afc91f267274884a25b9d84b0
elfutils-libelf-0.97.1-3.ppc.rpm	SHA-256: 19e7a1f3bef3c08d06e6e5860a537759ac8856013408fca4d3b6e5ade5095a93
elfutils-libelf-0.97.1-3.ppc64.rpm	SHA-256: 9dcfaa6dc646522ced7d3387bb3872e8266bfb1e34e5db51f036dbb9ff0ee924
elfutils-libelf-devel-0.97.1-3.ppc.rpm	SHA-256: 4557e0e9f543de7070f2b67eaba29815756179e6a85dd58f34e04c258db8810c