English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 143769 CVE descriptions
and 71225 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

---------------------------------------------------------------------
                   Red Hat Security Advisory

Synopsis:          Low: elfutils security update
Advisory ID:       RHSA-2006:0368-01
Advisory URL:      https://rhn.redhat.com/errata/RHSA-2006-0368.html
Issue date:        2006-07-20
Updated on:        2006-07-20
Product:           Red Hat Enterprise Linux
Keywords:          elfutils
CVE Names:         CVE-2005-1704 
- ---------------------------------------------------------------------

1. Summary:

Updated elfutils packages that address a minor security issue and various
other issues are now available.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

3. Problem description:

The elfutils packages contain a number of utility programs and libraries
related to the creation and maintenance of executable code.

The elfutils packages that originally shipped with Red Hat Enterprise Linux
3 were GPL-licensed versions which lacked some functionality. Previous
updates provided fully functional versions of elfutils only under the OSL
license. This update provides a fully functional, GPL-licensed version of
elfutils. 

In the OSL-licensed elfutils versions provided in previous updates, some
tools could sometimes crash when given corrupted input files. (CVE-2005-1704)

Also, when the eu-strip tool was used to create separate debuginfo files
from relocatable objects such as kernel modules (.ko), the resulting
debuginfo files (.ko.debug) were sometimes corrupted.  Both of these
problems are fixed in the new version.

Users of elfutils should upgrade to these updated packages, which resolve
these issues.

4. Solution:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade.  Only those
RPMs which are currently installed will be updated.  Those RPMs which are
not installed but included in the list will not be updated.  Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network.  Many
people find this an easier way to apply updates.  To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL
Certificate Errors, you need to install a version of the
up2date client with an updated certificate.  The latest version of
up2date is available from the Red Hat FTP site and may also be
downloaded directly from the RHN website:

https://rhn.redhat.com/help/latest-up2date.pxt

5. Bug IDs fixed (http://bugzilla.redhat.com/):

159908 - CVE-2005-1704 Integer overflow in libelf
187507 - RHEL3 U8: Elfutils license upgrade
189114 - eu-strip mangles separate debuginfo with relocation sections

6. RPMs required:

Red Hat Enterprise Linux AS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/elfutils-0.94.1-2.src.rpm
f9c89885daf3d51a699b99db4855b33c  elfutils-0.94.1-2.src.rpm

i386:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
bdfc7c99932291ae6ab742fd60ae0ca0  elfutils-devel-0.94.1-2.i386.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
b327fb13b08f74b472800b700439c39d  elfutils-libelf-devel-0.94.1-2.i386.rpm

ia64:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
148e0a5469f1808517416a0b8e319c48  elfutils-0.94.1-2.ia64.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
edda45ae94832daec035f16fad0ae1cf  elfutils-debuginfo-0.94.1-2.ia64.rpm
d69aa822ad4a73e1796fb699285a3e16  elfutils-devel-0.94.1-2.ia64.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
4981bc501ca8ede3a23c6ebf469f85b3  elfutils-libelf-0.94.1-2.ia64.rpm
8b9a5084a9c8f34b94198908bab6b6a2  elfutils-libelf-devel-0.94.1-2.ia64.rpm

ppc:
b9341cf90ec0737298a7e57d6a57b593  elfutils-0.94.1-2.ppc.rpm
037d2690cc56966149c2a3b2ba8e4885  elfutils-0.94.1-2.ppc64.rpm
75a4d805f6f4bc5bc01408429082775e  elfutils-debuginfo-0.94.1-2.ppc.rpm
33e5662958e13b7f448bc9863e375838  elfutils-debuginfo-0.94.1-2.ppc64.rpm
36398c56fe8adca7e4fdf4f084d513d4  elfutils-devel-0.94.1-2.ppc.rpm
d2c559b82e34b035c2f0864b34f56fa9  elfutils-libelf-0.94.1-2.ppc.rpm
9e94d133ca19169f88f364e483bba629  elfutils-libelf-0.94.1-2.ppc64.rpm
958ca58a79551292277ae448a01c5e01  elfutils-libelf-devel-0.94.1-2.ppc.rpm

s390:
a66109327605d7652f5cca2f6edc4c9c  elfutils-0.94.1-2.s390.rpm
36974e8ef9add022fa300041e8ce7529  elfutils-debuginfo-0.94.1-2.s390.rpm
bb297fba4cb392fff25d2982f924ab81  elfutils-devel-0.94.1-2.s390.rpm
92619133e3d38c362c540520573b39da  elfutils-libelf-0.94.1-2.s390.rpm
390fb07654eb89b5f43930720c419f98  elfutils-libelf-devel-0.94.1-2.s390.rpm

s390x:
a66109327605d7652f5cca2f6edc4c9c  elfutils-0.94.1-2.s390.rpm
a5498050a32775173fc9ea3faa6dfd9d  elfutils-0.94.1-2.s390x.rpm
36974e8ef9add022fa300041e8ce7529  elfutils-debuginfo-0.94.1-2.s390.rpm
a2d5048fcc7a763321eaf50eed9eb1a6  elfutils-debuginfo-0.94.1-2.s390x.rpm
dc2cc5075dbda8c07108d7b5e60c7cdf  elfutils-devel-0.94.1-2.s390x.rpm
92619133e3d38c362c540520573b39da  elfutils-libelf-0.94.1-2.s390.rpm
82431bc3f0c38f026d192b15b5f0d8ea  elfutils-libelf-0.94.1-2.s390x.rpm
da86201bdfedb1bc639cd033e28601ad  elfutils-libelf-devel-0.94.1-2.s390x.rpm

x86_64:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
55c216e57fdf0edf3623cdadd814456e  elfutils-0.94.1-2.x86_64.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
f389c86cba1e5fbda8d1798ecc32d142  elfutils-debuginfo-0.94.1-2.x86_64.rpm
921e1675d0c270e6f8e20a7413a65955  elfutils-devel-0.94.1-2.x86_64.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
5516fefe4b2c4ec3dd491cdc09f1f153  elfutils-libelf-0.94.1-2.x86_64.rpm
85aa5c18b57bcd149b074092e77aa172  elfutils-libelf-devel-0.94.1-2.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/elfutils-0.94.1-2.src.rpm
f9c89885daf3d51a699b99db4855b33c  elfutils-0.94.1-2.src.rpm

i386:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
bdfc7c99932291ae6ab742fd60ae0ca0  elfutils-devel-0.94.1-2.i386.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
b327fb13b08f74b472800b700439c39d  elfutils-libelf-devel-0.94.1-2.i386.rpm

x86_64:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
55c216e57fdf0edf3623cdadd814456e  elfutils-0.94.1-2.x86_64.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
f389c86cba1e5fbda8d1798ecc32d142  elfutils-debuginfo-0.94.1-2.x86_64.rpm
921e1675d0c270e6f8e20a7413a65955  elfutils-devel-0.94.1-2.x86_64.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
5516fefe4b2c4ec3dd491cdc09f1f153  elfutils-libelf-0.94.1-2.x86_64.rpm
85aa5c18b57bcd149b074092e77aa172  elfutils-libelf-devel-0.94.1-2.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/elfutils-0.94.1-2.src.rpm
f9c89885daf3d51a699b99db4855b33c  elfutils-0.94.1-2.src.rpm

i386:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
bdfc7c99932291ae6ab742fd60ae0ca0  elfutils-devel-0.94.1-2.i386.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
b327fb13b08f74b472800b700439c39d  elfutils-libelf-devel-0.94.1-2.i386.rpm

ia64:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
148e0a5469f1808517416a0b8e319c48  elfutils-0.94.1-2.ia64.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
edda45ae94832daec035f16fad0ae1cf  elfutils-debuginfo-0.94.1-2.ia64.rpm
d69aa822ad4a73e1796fb699285a3e16  elfutils-devel-0.94.1-2.ia64.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
4981bc501ca8ede3a23c6ebf469f85b3  elfutils-libelf-0.94.1-2.ia64.rpm
8b9a5084a9c8f34b94198908bab6b6a2  elfutils-libelf-devel-0.94.1-2.ia64.rpm

x86_64:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
55c216e57fdf0edf3623cdadd814456e  elfutils-0.94.1-2.x86_64.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
f389c86cba1e5fbda8d1798ecc32d142  elfutils-debuginfo-0.94.1-2.x86_64.rpm
921e1675d0c270e6f8e20a7413a65955  elfutils-devel-0.94.1-2.x86_64.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
5516fefe4b2c4ec3dd491cdc09f1f153  elfutils-libelf-0.94.1-2.x86_64.rpm
85aa5c18b57bcd149b074092e77aa172  elfutils-libelf-devel-0.94.1-2.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/elfutils-0.94.1-2.src.rpm
f9c89885daf3d51a699b99db4855b33c  elfutils-0.94.1-2.src.rpm

i386:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
bdfc7c99932291ae6ab742fd60ae0ca0  elfutils-devel-0.94.1-2.i386.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
b327fb13b08f74b472800b700439c39d  elfutils-libelf-devel-0.94.1-2.i386.rpm

ia64:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
148e0a5469f1808517416a0b8e319c48  elfutils-0.94.1-2.ia64.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
edda45ae94832daec035f16fad0ae1cf  elfutils-debuginfo-0.94.1-2.ia64.rpm
d69aa822ad4a73e1796fb699285a3e16  elfutils-devel-0.94.1-2.ia64.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
4981bc501ca8ede3a23c6ebf469f85b3  elfutils-libelf-0.94.1-2.ia64.rpm
8b9a5084a9c8f34b94198908bab6b6a2  elfutils-libelf-devel-0.94.1-2.ia64.rpm

x86_64:
aff3e63cdad846aa2d8f866ae517c388  elfutils-0.94.1-2.i386.rpm
55c216e57fdf0edf3623cdadd814456e  elfutils-0.94.1-2.x86_64.rpm
7b39a06ce634c2905b419a97c48f0b42  elfutils-debuginfo-0.94.1-2.i386.rpm
f389c86cba1e5fbda8d1798ecc32d142  elfutils-debuginfo-0.94.1-2.x86_64.rpm
921e1675d0c270e6f8e20a7413a65955  elfutils-devel-0.94.1-2.x86_64.rpm
676234c6860bfddc964ef7c9ad15c7f3  elfutils-libelf-0.94.1-2.i386.rpm
5516fefe4b2c4ec3dd491cdc09f1f153  elfutils-libelf-0.94.1-2.x86_64.rpm
85aa5c18b57bcd149b074092e77aa172  elfutils-libelf-devel-0.94.1-2.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1704
http://www.redhat.com/security/updates/classification/#low

8. Contact:

The Red Hat security contact is <secalert@redhat.com>.  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2006 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFEv4NvXlSAg2UNWIIRAqJqAKDC1zPip3KgakhLsFVOy4yBztYo3gCgtqgI
Fi1xbcIXOFWS8WwpeDzk0hY=
=g9+K
-----END PGP SIGNATURE-----

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe

© 1998-2019 E-Soft Inc. All rights reserved.