sys-devel/binutils: 2.27 - multiple security fixes, bug #618520, bug #618826
authorMatthias Maier <tamiko@gentoo.org>
Tue, 6 Jun 2017 19:01:21 +0000 (14:01 -0500)
committerMatthias Maier <tamiko@gentoo.org>
Tue, 6 Jun 2017 19:26:03 +0000 (14:26 -0500)
commitcd1ba24b30850d49e58b79af6e0f5387f9f7ed8d
tree4e6b45507543b9d90b20906f387af7279845301d
parent83b1bbf35b53f7becef8bba1f5c11ede1d57e0e1
sys-devel/binutils: 2.27 - multiple security fixes, bug #618520, bug #618826

CVE-2017-8421
  Prevent memory exhaustion from a corrupt PE binary with an overlarge number of relocs.
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=patch;h=39ff1b79f687b65f4144ddb379f22587003443fb

CVE-2017-9038
  readelf: Update check for invalid word offsets in ARM unwind information.
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f32ba72991d2406b21ab17edc234a2f3fa7fb23d

CVE-2017-9038
  readelf: Update check for invalid word offsets in ARM unwind information.
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f32ba72991d2406b21ab17edc234a2f3fa7fb23d

CVE-2017-9039
  readelf: Fix overlarge memory allocation when reading a binary with an excessive number of program headers.
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=82156ab704b08b124d319c0decdbd48b3ca2dac5

CVE-2017-9040, CVE-2017-9042
  readelf: fix out of range subtraction, seg fault from a NULL pointer and memory exhaustion, all from parsing corrupt binaries.
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf

CVE-2017-9041
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75ec1fdbb797a389e4fe4aaf2e15358a070dcc19
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=c4ab9505b53cdc899506ed421fddb7e1f8faf7a3

[2] https://bugs.gentoo.org/show_bug.cgi?id=618520
[2] https://bugs.gentoo.org/show_bug.cgi?id=618826

Package-Manager: Portage-2.3.6, Repoman-2.3.2
eclass/toolchain-binutils.eclass
sys-devel/binutils/Manifest
sys-devel/binutils/binutils-2.27-r1.ebuild [moved from sys-devel/binutils/binutils-2.27.ebuild with 81% similarity]