Synopsis

Low: elfutils security, bug fix, and enhancement update

Type/Severity

Security Advisory: Low

Topic

An update for elfutils is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code.

The following packages have been upgraded to a later upstream version: elfutils (0.176). (BZ#1683705)

Security Fix(es):

• elfutils: buffer over-read in the ebl_object_note function in eblobjnote.c in libebl (CVE-2019-7146)
  
• elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw (CVE-2019-7149)
  
• elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c (CVE-2019-7150)
  
• elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h (CVE-2019-7664)
  
• elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c (CVE-2019-7665)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for x86_64 8 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

• BZ - 1671432 - CVE-2019-7146 elfutils: buffer over-read in the ebl_object_note function in eblobjnote.c in libebl
• BZ - 1671443 - CVE-2019-7149 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw
• BZ - 1671446 - CVE-2019-7150 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c
• BZ - 1674430 - RFE: support reading compressed ELF objects
• BZ - 1677536 - CVE-2019-7664 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h
• BZ - 1677538 - CVE-2019-7665 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c
• BZ - 1705138 - elfutils xlate (cross-endian) functions might not convert an ELF Note header

CVEs

• CVE-2019-7146
• CVE-2019-7149
• CVE-2019-7150
• CVE-2019-7664
• CVE-2019-7665

References

• https://access.redhat.com/security/updates/classification/#low
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/

Red Hat Enterprise Linux for x86_64 8

SRPM
elfutils-0.176-5.el8.src.rpm	SHA-256: db6b1149e7c9038f0b812b3b5a487731438627f045926f78a3e46d3fd681c28a
x86_64
elfutils-0.176-5.el8.x86_64.rpm	SHA-256: f0b716c91bd23f768ace78d640ced93cb5698c757d7e527acd6cb77ada97da9b
elfutils-debuginfo-0.176-5.el8.i686.rpm	SHA-256: 278465cfb6108c916f099c0b7fa885c902b065b0ffe40a4dd906d6860455c3fe
elfutils-debuginfo-0.176-5.el8.x86_64.rpm	SHA-256: a3399bf2bbb05d32a3ad0396f4c23b8e7dbdcf59bc6c99f7c4c914764681c0e6
elfutils-debugsource-0.176-5.el8.i686.rpm	SHA-256: ca98d2d2579b0cf5de83074cbeb79b4b238c4d6959b5b9721f7ca666d1f99a26
elfutils-debugsource-0.176-5.el8.x86_64.rpm	SHA-256: 0779732bc97cc0683d68065258b32aa1491f22212e9f2bd555ff5a4a8f422b89
elfutils-default-yama-scope-0.176-5.el8.noarch.rpm	SHA-256: d116ac88a0090fed0b22e39dcef8a1bc3782593ae7844074b7bafc47cb3e6c8a
elfutils-devel-0.176-5.el8.i686.rpm	SHA-256: 2cbc12b96b382b004cedef58ede03d2f355d540d7d8b84e8d80945c1e9d806c9
elfutils-devel-0.176-5.el8.x86_64.rpm	SHA-256: ed29b2f755a81d5c59b7d9e5e9b4518a3a0a7f52ba6574594fd00d329dc000aa
elfutils-libelf-0.176-5.el8.i686.rpm	SHA-256: d8314c94bbcc9dca524e3581be6c601742b31db6a068d3457f93364fefe3a99b
elfutils-libelf-0.176-5.el8.x86_64.rpm	SHA-256: 2f85281da9928fbf0be933e015b2042ab48df7ffa8e1e1b42f06c28364a80b62
elfutils-libelf-debuginfo-0.176-5.el8.i686.rpm	SHA-256: a7029a43bab628ef1c112c0fd3a5f281df446805aeb5ae7b6fb791483754f70c
elfutils-libelf-debuginfo-0.176-5.el8.x86_64.rpm	SHA-256: 596d8c47d7e848c7a6c8bc8262907939a7e5a1d413155cfc055aa1bd20320e0a
elfutils-libelf-devel-0.176-5.el8.i686.rpm	SHA-256: 27cfc52145b73e4db19ce6b98513edea8e1ed67af3dd7758381129be83e9a507
elfutils-libelf-devel-0.176-5.el8.x86_64.rpm	SHA-256: 54b00c3d0a96a051038e7b230a2fedf532c0fde6c9deac85ec606baf53109acd
elfutils-libs-0.176-5.el8.i686.rpm	SHA-256: b58837f666969f3269fd4fef6e00fadb7f2e5098fbb2305e420c0f682105dfa4
elfutils-libs-0.176-5.el8.x86_64.rpm	SHA-256: 342c547fd348f6182de26beb691b30ed83d4e506580f4a5e2b61f1ddee7cc47d
elfutils-libs-debuginfo-0.176-5.el8.i686.rpm	SHA-256: c8f765ca927f981f7d7133678ed07597e23163c9c5fee28560d1e9986bb073bb
elfutils-libs-debuginfo-0.176-5.el8.x86_64.rpm	SHA-256: 41f1df904f7eac8e596ea256a29ed386aa69496ee092bd3269872daf277648f2

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
elfutils-0.176-5.el8.src.rpm	SHA-256: db6b1149e7c9038f0b812b3b5a487731438627f045926f78a3e46d3fd681c28a
s390x
elfutils-0.176-5.el8.s390x.rpm	SHA-256: 95ad92a3fbc598fe1420086491b38148ebc83ce56639d4ad54136944d7d0adae
elfutils-debuginfo-0.176-5.el8.s390x.rpm	SHA-256: b1c3a73b7ba2c43de332ae95ab590572c0d63512c61a44028188dd65da54c802
elfutils-debugsource-0.176-5.el8.s390x.rpm	SHA-256: 86035bf622881ff4a6cd1a7d985c88ef88cb5840cd0663c825921b9a03484f67
elfutils-default-yama-scope-0.176-5.el8.noarch.rpm	SHA-256: d116ac88a0090fed0b22e39dcef8a1bc3782593ae7844074b7bafc47cb3e6c8a
elfutils-devel-0.176-5.el8.s390x.rpm	SHA-256: 512a55a94e15479fe00714341004f701ad135970a5b05124dfeb9121679ab422
elfutils-libelf-0.176-5.el8.s390x.rpm	SHA-256: 4c068a822b99541bdf3ac70f11f331d41c9d468b10e4c60dc32422dff041d9eb
elfutils-libelf-debuginfo-0.176-5.el8.s390x.rpm	SHA-256: 61eccf8082648535d4fbe03aa3c452dc387a3fe4dca38ba9e60e91cebe2163b8
elfutils-libelf-devel-0.176-5.el8.s390x.rpm	SHA-256: 4d2192a706dd9003949f92b013e79bd3f7a3183a79bffb45cd33b33a50837870
elfutils-libs-0.176-5.el8.s390x.rpm	SHA-256: 376a297170a049973dc6f342070205b18fad306d71ccd4183c9be66a1f432501
elfutils-libs-debuginfo-0.176-5.el8.s390x.rpm	SHA-256: 6f798e2376ffabeb5d1f789b5bb09056d7d7ba5049c98837750200d0addad646

Red Hat Enterprise Linux for Power, little endian 8

SRPM
elfutils-0.176-5.el8.src.rpm	SHA-256: db6b1149e7c9038f0b812b3b5a487731438627f045926f78a3e46d3fd681c28a
ppc64le
elfutils-0.176-5.el8.ppc64le.rpm	SHA-256: 2618198565b15bc25aad5987bcd8b5aa780520a417749fc41869ed9bd6b27a17
elfutils-debuginfo-0.176-5.el8.ppc64le.rpm	SHA-256: 5f69daf2d43f88fcda245013ed4cbb17bc5ce73a7d7015d97ea644920e3a29b6
elfutils-debugsource-0.176-5.el8.ppc64le.rpm	SHA-256: 47b2e90ab7a2b52ac2339eb1691a93ca12674e7c0d014dc1f84fe1653e43e05c
elfutils-default-yama-scope-0.176-5.el8.noarch.rpm	SHA-256: d116ac88a0090fed0b22e39dcef8a1bc3782593ae7844074b7bafc47cb3e6c8a
elfutils-devel-0.176-5.el8.ppc64le.rpm	SHA-256: ebff5e7c4cc38560cdfd419ea6f5ab20c46f6891553c5eb07e41745158510861
elfutils-libelf-0.176-5.el8.ppc64le.rpm	SHA-256: 5d7b081e25d911ef62e8262878c97c4fa11fb7d4637d515a64a92011c36c6597
elfutils-libelf-debuginfo-0.176-5.el8.ppc64le.rpm	SHA-256: bfb7c072caae96bb55d51f4cb228a8799a5762c31d846707a36ae1a6127d36d3
elfutils-libelf-devel-0.176-5.el8.ppc64le.rpm	SHA-256: 46f713bb83628c86a2eb0eb827d136c304ee460e6c47fecae39898c373d682d6
elfutils-libs-0.176-5.el8.ppc64le.rpm	SHA-256: 62f0efbb299b12121854b61d93d7865406ccf5ad8991b72c05d7eb8e9cb52a59
elfutils-libs-debuginfo-0.176-5.el8.ppc64le.rpm	SHA-256: 75ee1ca6c24a10c24e1610f7848d5534363acb8b306a40eca7371830375792ae

Red Hat Enterprise Linux for ARM 64 8

SRPM
elfutils-0.176-5.el8.src.rpm	SHA-256: db6b1149e7c9038f0b812b3b5a487731438627f045926f78a3e46d3fd681c28a
aarch64
elfutils-0.176-5.el8.aarch64.rpm	SHA-256: 899cbf29687efd6eb3a48fb36e4774e06838f428c91e23b190a5e5ad94e798f8
elfutils-debuginfo-0.176-5.el8.aarch64.rpm	SHA-256: 057358180ac94ce1488ee9ccb5133d77336be637ebd70d1b77d9a29a5268380b
elfutils-debugsource-0.176-5.el8.aarch64.rpm	SHA-256: 96085e8a6d165ddb0a8de61a4a4bbe2711e60fd86546895296572bbf20191a8f
elfutils-default-yama-scope-0.176-5.el8.noarch.rpm	SHA-256: d116ac88a0090fed0b22e39dcef8a1bc3782593ae7844074b7bafc47cb3e6c8a
elfutils-devel-0.176-5.el8.aarch64.rpm	SHA-256: c6518baf66afc8305be52a8cc50f9d30875cef3b42a6d41f28800bfb1a39d621
elfutils-libelf-0.176-5.el8.aarch64.rpm	SHA-256: 2a48a4f51e873b8abc2f532516dd2a0878e20cbcbb8b0436b3fbaa5fdbca067f
elfutils-libelf-debuginfo-0.176-5.el8.aarch64.rpm	SHA-256: 2f4c0af5dd2ce418bcdd5cf8fc06d945d5b7ba43024df6fb9e99a2b35ee0577a
elfutils-libelf-devel-0.176-5.el8.aarch64.rpm	SHA-256: 43b22edbb5370eb78f13f36d892275d18c31cf9c14e3a5d74ed3dd8d0786c2f4
elfutils-libs-0.176-5.el8.aarch64.rpm	SHA-256: df90435459c265a42537a25414e5fff6f6f9bfe5204e3a8fe9f73ebeb80a0d02
elfutils-libs-debuginfo-0.176-5.el8.aarch64.rpm	SHA-256: 52164d3817a0d92b1634648e030f2a7dee71ef226a29fbc318be42cc5836b6c0

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
elfutils-debuginfo-0.176-5.el8.i686.rpm	SHA-256: 278465cfb6108c916f099c0b7fa885c902b065b0ffe40a4dd906d6860455c3fe
elfutils-debuginfo-0.176-5.el8.x86_64.rpm	SHA-256: a3399bf2bbb05d32a3ad0396f4c23b8e7dbdcf59bc6c99f7c4c914764681c0e6
elfutils-debugsource-0.176-5.el8.i686.rpm	SHA-256: ca98d2d2579b0cf5de83074cbeb79b4b238c4d6959b5b9721f7ca666d1f99a26
elfutils-debugsource-0.176-5.el8.x86_64.rpm	SHA-256: 0779732bc97cc0683d68065258b32aa1491f22212e9f2bd555ff5a4a8f422b89
elfutils-devel-static-0.176-5.el8.i686.rpm	SHA-256: 5bd13c92ecc3e7559f168f8cbded5a6bcd2143a6db093599124723055b70f44e
elfutils-devel-static-0.176-5.el8.x86_64.rpm	SHA-256: ee8b1c2ec47c79893fa7c73e5bdb5dc6f6e07fb125f9d82e2d4c86d27505dceb
elfutils-libelf-debuginfo-0.176-5.el8.i686.rpm	SHA-256: a7029a43bab628ef1c112c0fd3a5f281df446805aeb5ae7b6fb791483754f70c
elfutils-libelf-debuginfo-0.176-5.el8.x86_64.rpm	SHA-256: 596d8c47d7e848c7a6c8bc8262907939a7e5a1d413155cfc055aa1bd20320e0a
elfutils-libelf-devel-static-0.176-5.el8.i686.rpm	SHA-256: 67c47ea0f3ae3e8ad1c1fdfde92a5e03e4dd68724bb94bf02eaeef8aa5c167f3
elfutils-libelf-devel-static-0.176-5.el8.x86_64.rpm	SHA-256: faf1b2458a715a08122ecbb0735dc412b874c9ae8257deccba3a44be8b2f2c0c
elfutils-libs-debuginfo-0.176-5.el8.i686.rpm	SHA-256: c8f765ca927f981f7d7133678ed07597e23163c9c5fee28560d1e9986bb073bb
elfutils-libs-debuginfo-0.176-5.el8.x86_64.rpm	SHA-256: 41f1df904f7eac8e596ea256a29ed386aa69496ee092bd3269872daf277648f2

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
elfutils-debuginfo-0.176-5.el8.ppc64le.rpm	SHA-256: 5f69daf2d43f88fcda245013ed4cbb17bc5ce73a7d7015d97ea644920e3a29b6
elfutils-debugsource-0.176-5.el8.ppc64le.rpm	SHA-256: 47b2e90ab7a2b52ac2339eb1691a93ca12674e7c0d014dc1f84fe1653e43e05c
elfutils-devel-static-0.176-5.el8.ppc64le.rpm	SHA-256: a14f26c77955e51089304174fcf7395fe2970ab368fc75e9b997f069362cae86
elfutils-libelf-debuginfo-0.176-5.el8.ppc64le.rpm	SHA-256: bfb7c072caae96bb55d51f4cb228a8799a5762c31d846707a36ae1a6127d36d3
elfutils-libelf-devel-static-0.176-5.el8.ppc64le.rpm	SHA-256: 9291cbdbe3773b64f77ec790be947f00f07524bd90295bcac1137390d8c16dda
elfutils-libs-debuginfo-0.176-5.el8.ppc64le.rpm	SHA-256: 75ee1ca6c24a10c24e1610f7848d5534363acb8b306a40eca7371830375792ae

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
elfutils-debuginfo-0.176-5.el8.aarch64.rpm	SHA-256: 057358180ac94ce1488ee9ccb5133d77336be637ebd70d1b77d9a29a5268380b
elfutils-debugsource-0.176-5.el8.aarch64.rpm	SHA-256: 96085e8a6d165ddb0a8de61a4a4bbe2711e60fd86546895296572bbf20191a8f
elfutils-devel-static-0.176-5.el8.aarch64.rpm	SHA-256: b108d3e583c7c14e81cd6f866e3a5a931f7b6b92e42267688e244a1930b81786
elfutils-libelf-debuginfo-0.176-5.el8.aarch64.rpm	SHA-256: 2f4c0af5dd2ce418bcdd5cf8fc06d945d5b7ba43024df6fb9e99a2b35ee0577a
elfutils-libelf-devel-static-0.176-5.el8.aarch64.rpm	SHA-256: 5232c71eea60ee6e47a5de1c44df730a61d1b6ca14de95c928449c41995d5aca
elfutils-libs-debuginfo-0.176-5.el8.aarch64.rpm	SHA-256: 52164d3817a0d92b1634648e030f2a7dee71ef226a29fbc318be42cc5836b6c0

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
elfutils-debuginfo-0.176-5.el8.s390x.rpm	SHA-256: b1c3a73b7ba2c43de332ae95ab590572c0d63512c61a44028188dd65da54c802
elfutils-debugsource-0.176-5.el8.s390x.rpm	SHA-256: 86035bf622881ff4a6cd1a7d985c88ef88cb5840cd0663c825921b9a03484f67
elfutils-devel-static-0.176-5.el8.s390x.rpm	SHA-256: 7661abe8254b2c60f52e2ebd71c7098939179524d68b6d7fe7fdc1ea5f067fd3
elfutils-libelf-debuginfo-0.176-5.el8.s390x.rpm	SHA-256: 61eccf8082648535d4fbe03aa3c452dc387a3fe4dca38ba9e60e91cebe2163b8
elfutils-libelf-devel-static-0.176-5.el8.s390x.rpm	SHA-256: 49a38b157347db32b7fe16f0f9bb99a5b4c27ddd451be5f677fae6efabdc2e28
elfutils-libs-debuginfo-0.176-5.el8.s390x.rpm	SHA-256: 6f798e2376ffabeb5d1f789b5bb09056d7d7ba5049c98837750200d0addad646