This update for gdb fixes the following issues :

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed :

  - CVE-2019-1010180: Fixed a potential buffer overflow when     loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  - Enable librpm for version > librpm.so.3 [bsc#1145692] :

  - Allow any librpm.so.x

  - Add %build test to check for 'zypper install     <rpm-packagename>' message

  - Copy gdbinit from fedora master @ 25caf28. Add     gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  - DWARF index cache: GDB can now automatically save     indices of DWARF symbols on disk to speed up further     loading of the same binaries.

  - Ada task switching is now supported on aarch64-elf     targets when debugging a program using the Ravenscar     Profile.

  - Terminal styling is now available for the CLI and the     TUI.

  - Removed support for old demangling styles arm, edg, gnu,     hp and lucid.

  - Support for new native configuration RISC-V GNU/Linux     (riscv*-*-linux*).

  - Implemented access to more POWER8 registers.
    [fate#326120, fate#325178]

  - Handle most of new s390 arch13 instructions.
    [fate#327369, jsc#ECO-368]

This update was imported from the SUSE:SLE-15:Update update project.

According to the versions of the binutils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - GNU gdb All versions is affected by: Buffer Overflow -     Out of bound memory access. The impact is: Deny of     Service, Memory Disclosure, and Possible Code     Execution. The component is: The main gdb module. The     attack vector is: Open an ELF for debugging. The fixed     version is: Not fixed yet.(CVE-2019-1010180)

  - The _bfd_generic_read_minisymbols function in syms.c in     the Binary File Descriptor (BFD) library (aka libbfd),     as distributed in GNU Binutils 2.31, has a memory leak     via a crafted ELF file, leading to a denial of service     (memory consumption), as demonstrated by     nm.(CVE-2018-20002)

  - binutils version 2.32 and earlier contains a Integer     Overflow vulnerability in objdump,     bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dyna     mic_reloc that can result in Integer overflow trigger     heap overflow. Successful exploitation allows execution     of arbitrary code.. This attack appear to be     exploitable via Local. This vulnerability appears to     have been fixed in after commit     3a551c7a1b80fca579461774860574eabfd7f18f.(CVE-2018-1000     876)

  - An issue was discovered in the merge_strings function     in merge.c in the Binary File Descriptor (BFD) library     (aka libbfd), as distributed in GNU Binutils 2.31.
    There is a NULL pointer dereference in
    _bfd_add_merge_section when attempting to merge     sections with large alignments. A specially crafted ELF     allows remote attackers to cause a denial of service,     as demonstrated by ld.(CVE-2018-18606)

  - An issue was discovered in elf_link_input_bfd in     elflink.c in the Binary File Descriptor (BFD) library     (aka libbfd), as distributed in GNU Binutils 2.31.
    There is a NULL pointer dereference in     elf_link_input_bfd when used for finding STT_TLS     symbols without any TLS section. A specially crafted     ELF allows remote attackers to cause a denial of     service, as demonstrated by ld.(CVE-2018-18607)

  - A heap-based buffer over-read issue was discovered in     the function sec_merge_hash_lookup in merge.c in the     Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.31, because
    _bfd_add_merge_section mishandles section merges when     size is not a multiple of entsize. A specially crafted     ELF allows remote attackers to cause a denial of     service, as demonstrated by ld.(CVE-2018-18605)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.31. An invalid memory address dereference     was discovered in read_reloc in reloc.c. The     vulnerability causes a segmentation fault and     application crash, which leads to denial of service, as     demonstrated by objdump, because of missing
    _bfd_clear_contents bounds checking.(CVE-2018-18309)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an integer overflow leading to a     SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as     demonstrated by nm.(CVE-2019-17451)

  - find_abstract_instance in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.32, allows remote attackers to cause     a denial of service (infinite recursion and application     crash) via a crafted ELF file.(CVE-2019-17450)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. There is a heap-based buffer over-read     in _bfd_doprnt in bfd.c because elf_object_p in     elfcode.h mishandles an e_shstrndx section of type     SHT_GROUP by omitting a trailing '\0'     character.(CVE-2019-12972)

  - load_specific_debug_section in objdump.c in GNU     Binutils through 2.31.1 contains an integer overflow     vulnerability that can trigger a heap-based buffer     overflow via a crafted section size.(CVE-2018-20671)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A use after free issue exists in the Binary File     Descriptor (BFD) library (aka libbfd) in GNU Binutils     2.34 in bfd_hash_lookup, as demonstrated in nm-new,     that can cause a denial of service via a crafted     file.(CVE-2020-16592)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.31. An invalid memory access exists in
    _bfd_stab_section_find_nearest_line in syms.c.
    Attackers could leverage this vulnerability to cause a     denial of service (application crash) via a crafted ELF     file.(CVE-2018-17358)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.31. An invalid memory address dereference     was discovered in read_reloc in reloc.c. The     vulnerability causes a segmentation fault and     application crash, which leads to denial of service, as     demonstrated by objdump, because of missing
    _bfd_clear_contents bounds checking.(CVE-2018-18309)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.31. An invalid memory access exists in     bfd_zalloc in opncls.c. Attackers could leverage this     vulnerability to cause a denial of service (application     crash) via a crafted ELF file.(CVE-2018-17359)

  - GNU gdb All versions is affected by: Buffer Overflow -     Out of bound memory access. The impact is: Deny of     Service, Memory Disclosure, and Possible Code     Execution. The component is: The main gdb module. The     attack vector is: Open an ELF for debugging. The fixed     version is: Not fixed yet.(CVE-2019-1010180)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the crash packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of     Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack     vector is: Open an ELF for debugging. The fixed version is: Not fixed yet. (CVE-2019-1010180)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a heap-based     buffer over-read in d_expression_1 in cp-demangle.c     after many recursive calls.(CVE-2019-9070)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a stack     consumption issue in d_count_templates_scopes in     cp-demangle.c after many recursive     calls.(CVE-2019-9071)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32.
    simple_object_elf_match in simple-object-elf.c does not     check for a zero shstrndx value, leading to an integer     overflow and resultant heap-based buffer     overflow.(CVE-2019-14250)

  - GNU gdb All versions is affected by: Buffer Overflow -     Out of bound memory access. The impact is: Deny of     Service, Memory Disclosure, and Possible Code     Execution. The component is: The main gdb module. The     attack vector is: Open an ELF for debugging. The fixed     version is: Not fixed yet.(CVE-2019-1010180)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an integer overflow leading to a     SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as     demonstrated by nm.(CVE-2019-17451)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an attempted excessive memory     allocation in _bfd_elf_slurp_version_tables in     elf.c.(CVE-2019-9073)

  - apply_relocations in readelf.c in GNU Binutils 2.32     contains an integer overflow that allows attackers to     trigger a write access violation (in     byte_put_little_endian function in elfcomm.c) via an     ELF file, as demonstrated by readelf.(CVE-2019-14444)

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for binutils fixes the following issues :

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes :

CVE-2018-17358: Fixed invalid memory access in
_bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)

CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)

CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)

CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)

CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)

CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)

CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)

CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)

CVE-2018-18606: Fixed a NULL pointer dereference in
_bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)

CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)

CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)

CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)

CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)

CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)

CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)

CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)

CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

enable xtensa architecture (Tensilica lc6 and related)

Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).

Fixed some LTO build issues (bsc#1133131 bsc#1133232).

riscv: Don't check ABI flags if no code section

Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).

Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32: The binutils now support for the C-SKY processor series.

The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new

-mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.

The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.

The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.

Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.

The BFD linker will now report property change in linker map file when merging GNU properties.

The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a linker bug report.

The GOLD linker has improved warning messages for relocations that refer to discarded sections.

Improve relro support on s390 [fate#326356]

Fix broken debug symbols (bsc#1118644)

Handle ELF compressed header alignment correctly.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gdb fixes the following issues :

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed :

CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1. Enable librpm for version > librpm.so.3 [bsc#1145692] :

  - Allow any librpm.so.x

  - Add %build test to check for 'zypper install     <rpm-packagename>' message </rpm-packagename>

Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3). DWARF index cache:
GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.

Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.

Terminal styling is now available for the CLI and the TUI.

Removed support for old demangling styles arm, edg, gnu, hp and lucid.

Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*).

Implemented access to more POWER8 registers. [fate#326120, fate#325178]

Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gdb fixes the following issues :

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed :

  - CVE-2019-1010180: Fixed a potential buffer overflow when     loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  - Enable librpm for version > librpm.so.3 [bsc#1145692] :

  - Allow any librpm.so.x

  - Add %build test to check for 'zypper install     <rpm-packagename>' message

  - Copy gdbinit from fedora master @ 25caf28. Add     gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  - DWARF index cache: GDB can now automatically save     indices of DWARF symbols on disk to speed up further     loading of the same binaries.

  - Ada task switching is now supported on aarch64-elf     targets when debugging a program using the Ravenscar     Profile.

  - Terminal styling is now available for the CLI and the     TUI.

  - Removed support for old demangling styles arm, edg, gnu,     hp and lucid.

  - Support for new native configuration RISC-V GNU/Linux     (riscv*-*-linux*).

  - Implemented access to more POWER8 registers.
    [fate#326120, fate#325178]

  - Handle most of new s390 arch13 instructions.
    [fate#327369, jsc#ECO-368]

This update was imported from the SUSE:SLE-15-SP1:Update update project.

An update of the gdb package has been released.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1635 advisory.

    [8.2-11.0.1]
    - Import Implement s390x arch13 support (Andreas Krebbel, RH BZ 1768593).

    [8.2-8.0.2]
    - Forward-port patches from ol8-u1:
      gdb-ctf-forward-type.patch       gdb-ctf-func-args.patch       gdb-ctf-optout-var.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

    [8.2-8.0.1]
    - Forward-port patches from ol8-u1:
      gdb-ctf.patch       gdb-ctf-upstream1.patch       gdb-ctf-prfunc.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

    [8.2-8.el8]
    - Fix buffer overflow reading sections with invalid sizes       (Keith Seitz, RH BZ 1742099)

    [8.2-7.el8]
    - Fix segfault that happens on parse_macro_definition because       debugedit corrupts the .debug_macro section (Sergio Durigan Junior,       RH BZ 1708192).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
130939	openSUSE Security Update : gdb (openSUSE-2019-2493)	Nessus	SuSE Local Security Checks	2019/11/13	2024/4/11	high
132828	EulerOS Virtualization for ARM 64 3.0.5.0 : binutils (EulerOS-SA-2020-1074)	Nessus	Huawei Local Security Checks	2020/1/13	2024/4/1	high
153333	EulerOS 2.0 SP2 : binutils (EulerOS-SA-2021-2355)	Nessus	Huawei Local Security Checks	2021/9/14	2023/11/30	high
171308	EulerOS 2.0 SP10 : crash (EulerOS-SA-2023-1350)	Nessus	Huawei Local Security Checks	2023/2/10	2023/9/4	high
140839	EulerOS 2.0 SP3 : binutils (EulerOS-SA-2020-2072)	Nessus	Huawei Local Security Checks	2020/9/28	2024/2/19	high
130340	SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2019:2780-1)	Nessus	SuSE Local Security Checks	2019/10/28	2021/1/13	high
130752	SUSE SLED15 / SLES15 Security Update : gdb (SUSE-SU-2019:2913-1)	Nessus	SuSE Local Security Checks	2019/11/8	2024/4/12	high
130940	openSUSE Security Update : gdb (openSUSE-2019-2494)	Nessus	SuSE Local Security Checks	2019/11/13	2024/4/11	high
135303	Photon OS 2.0: Gdb PHSA-2020-2.0-0225	Nessus	PhotonOS Local Security Checks	2020/4/10	2024/7/23	high
180981	Oracle Linux 8 : gdb (ELSA-2020-1635)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	high
203078	Photon OS 3.0: Gdb PHSA-2019-3.0-0036	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/24	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high