Revision Date: | 2020-12-01 | Version: | 1 |
Title: | Security update for binutils (Moderate) |
Description: |
This update for binutils fixes the following issues:
binutils was updated to version 2.35. (jsc#ECO-2373)
Update to binutils 2.35:
The assembler can now produce DWARF-5 format line number tables. * Readelf now has a 'lint' mode to enable extra checks of the files it is processing. * Readelf will now display '[...]' when it has to truncate a symbol name. The old behaviour - of displaying as many characters as possible, up to the 80 column limit - can be restored by the use of the --silent-truncation option. * The linker can now produce a dependency file listing the inputs that it has processed, much like the -M -MP option supported by the compiler.
- fix DT_NEEDED order with -flto [bsc#1163744]
Update to binutils 2.34:
The disassembler (objdump --disassemble) now has an option to generate ascii art thats show the arcs between that start and end points of control flow instructions. * The binutils tools now have support for debuginfod. Debuginfod is a HTTP service for distributing ELF/DWARF debugging information as well as source code. The tools can now connect to debuginfod servers in order to download debug information about the files that they are processing. * The assembler and linker now support the generation of ELF format files for the Z80 architecture.
- Add new subpackages for libctf and libctf-nobfd. - Disable LTO due to bsc#1163333. - Includes fixes for these CVEs: bsc#1153768 aka CVE-2019-17451 aka PR25070 bsc#1153770 aka CVE-2019-17450 aka PR25078
- fix various build fails on aarch64 (PR25210, bsc#1157755).
Update to binutils 2.33.1:
Adds support for the Arm Scalable Vector Extension version 2 (SVE2) instructions, the Arm Transactional Memory Extension (TME) instructions and the Armv8.1-M Mainline and M-profile Vector Extension (MVE) instructions. * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE, Cortex-A76AE, and Cortex-A77 processors. * Adds a .float16 directive for both Arm and AArch64 to allow encoding of 16-bit floating point literals. * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not) Loongson3 LLSC Errata. Add a --enable-mips-fix-loongson3-llsc=[yes|no] configure time option to set the default behavior. Set the default if the configure option is not used to 'no'. * The Cortex-A53 Erratum 843419 workaround now supports a choice of which workaround to use. The option --fix-cortex-a53-843419 now takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp] which can be used to force a particular workaround to be used. See --help for AArch64 for more details. * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and GNU_PROPERTY_AARCH64_FEATURE_1_PAC in ELF GNU program properties in the AArch64 ELF linker. * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI on inputs and use PLTs protected with BTI. * Add -z pac-plt for AArch64 to pick PAC enabled PLTs. * Add --source-comment[=] option to objdump which if present, provides a prefix to source code lines displayed in a disassembly. * Add --set-section-alignment = option to objcopy to allow the changing of section alignments. * Add --verilog-data-width option to objcopy for verilog targets to control width of data elements in verilog hex format. * The separate debug info file options of readelf (--debug-dump=links and --debug-dump=follow) and objdump (--dwarf=links and --dwarf=follow-links) will now display and/or follow multiple links if more than one are present in a file. (This usually happens when gcc's -gsplit-dwarf option is used). In addition objdump's --dwarf=follow-links now also affects its other display options, so that for example, when combined with --syms it will cause the symbol tables in any linked debug info files to also be displayed. In addition when combined with --disassemble the --dwarf= follow-links option will ensure that any symbol tables in the linked files are read and used when disassembling code in the main file. * Add support for dumping types encoded in the Compact Type Format to objdump and readelf. - Includes fixes for these CVEs: bsc#1126826 aka CVE-2019-9077 aka PR1126826 bsc#1126829 aka CVE-2019-9075 aka PR1126829 bsc#1126831 aka CVE-2019-9074 aka PR24235 bsc#1140126 aka CVE-2019-12972 aka PR23405 bsc#1143609 aka CVE-2019-14444 aka PR24829 bsc#1142649 aka CVE-2019-14250 aka PR90924
Add xBPF target * Fix various problems with DWARF 5 support in gas * fix nm -B for objects compiled with -flto and -fcommon.
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1126826 1126829 1126831 1130840 1140126 1142649 1143609 1149955 1153238 1153768 1153770 1157755 1160254 1160590 1163333 1163744 718113 856729 909563 910647 910669 939998 945443 945445 954980 955832 965294 965296 965902 966822 967014 967015 977784 CVE-2006-4484 CVE-2009-0945 CVE-2010-4000 CVE-2011-3193 CVE-2011-3922 CVE-2012-4929 CVE-2012-6093 CVE-2013-0254 CVE-2013-1984 CVE-2013-1995 CVE-2013-1998 CVE-2013-4549 CVE-2014-0190 CVE-2014-1569 CVE-2014-3686 CVE-2014-8634 CVE-2014-8635 CVE-2014-8638 CVE-2014-8639 CVE-2014-8641 CVE-2014-8767 CVE-2014-8768 CVE-2014-8769 CVE-2014-9140 CVE-2015-0210 CVE-2015-0261 CVE-2015-0295 CVE-2015-0797 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 CVE-2015-1863 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2015-7511 CVE-2015-8126 CVE-2016-0729 CVE-2016-0794 CVE-2016-0795 CVE-2016-3698 CVE-2016-6318 CVE-2016-9445 CVE-2016-9446 CVE-2016-9447 CVE-2016-9809 CVE-2019-12972 CVE-2019-14250 CVE-2019-14444 CVE-2019-16056 CVE-2019-16935 CVE-2019-17450 CVE-2019-17451 CVE-2019-9074 CVE-2019-9075 CVE-2019-9077 CVE-2019-9947 SUSE-SU-2016:0050-1 SUSE-SU-2016:1026-1 SUSE-SU-2016:1089-1 SUSE-SU-2016:1728-1 SUSE-SU-2019:2743-1 SUSE-SU-2020:3060-1
|
Platform(s): | openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
Definition Synopsis |
openSUSE Leap 15.0 is installed AND libimobiledevice6-1.2.0+git20170122.45fda81-lp150.1 is installed
|
Definition Synopsis |
openSUSE Leap 15.1 is installed
AND Package Information
python-Django-2.2.4-lp151.2.3 is installed
OR python3-Django-2.2.4-lp151.2.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 11 SP2 is installed
AND Package Information
bind-libs-9.9.4P2-0.6 is installed
OR bind-libs-32bit-9.9.4P2-0.6 is installed
OR bind-utils-9.9.4P2-0.6 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 11 SP3 is installed
AND cabextract-1.2-2.10 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
dhcp-4.2.4.P2-0.24 is installed
OR dhcp-client-4.2.4.P2-0.24 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
MozillaFirefox-31.4.0esr-20 is installed
OR MozillaFirefox-translations-31.4.0esr-20 is installed
OR libfreebl3-3.17.3-16 is installed
OR libfreebl3-32bit-3.17.3-16 is installed
OR libsoftokn3-3.17.3-16 is installed
OR libsoftokn3-32bit-3.17.3-16 is installed
OR mozilla-nss-3.17.3-16 is installed
OR mozilla-nss-32bit-3.17.3-16 is installed
OR mozilla-nss-certs-3.17.3-16 is installed
OR mozilla-nss-certs-32bit-3.17.3-16 is installed
OR mozilla-nss-tools-3.17.3-16 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP1 is installed
AND wpa_supplicant-2.2-8 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
gnome-shell-3.20.4-70 is installed
OR gnome-shell-browser-plugin-3.20.4-70 is installed
OR gnome-shell-calendar-3.20.4-70 is installed
OR gnome-shell-lang-3.20.4-70 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
gstreamer-0_10-plugins-bad-0.10.23-25 is installed
OR gstreamer-0_10-plugins-bad-lang-0.10.23-25 is installed
OR libgstbasecamerabinsrc-0_10-23-0.10.23-25 is installed
OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-25 is installed
OR libgstbasevideo-0_10-23-0.10.23-25 is installed
OR libgstbasevideo-0_10-23-32bit-0.10.23-25 is installed
OR libgstcodecparsers-0_10-23-0.10.23-25 is installed
OR libgstphotography-0_10-23-0.10.23-25 is installed
OR libgstphotography-0_10-23-32bit-0.10.23-25 is installed
OR libgstsignalprocessor-0_10-23-0.10.23-25 is installed
OR libgstsignalprocessor-0_10-23-32bit-0.10.23-25 is installed
OR libgstvdp-0_10-23-0.10.23-25 is installed
OR libgstvdp-0_10-23-32bit-0.10.23-25 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
cracklib-2.9.0-7 is installed
OR libcrack2-2.9.0-7 is installed
OR libcrack2-32bit-2.9.0-7 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed
AND Package Information
binutils-2.35-7.11 is installed
OR binutils-gold-2.35-7.11 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
AND Package Information
python-2.7.14-7.24 is installed
OR python-base-2.7.14-7.24 is installed
OR python-curses-2.7.14-7.24 is installed
OR python-devel-2.7.14-7.24 is installed
OR python-gdbm-2.7.14-7.24 is installed
OR python-xml-2.7.14-7.24 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
java-1_7_0-openjdk-1.7.0.91-21 is installed
OR java-1_7_0-openjdk-demo-1.7.0.91-21 is installed
OR java-1_7_0-openjdk-devel-1.7.0.91-21 is installed
OR java-1_7_0-openjdk-headless-1.7.0.91-21 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kernel-default-3.12.74-60.64.54 is installed
OR kernel-default-base-3.12.74-60.64.54 is installed
OR kernel-default-devel-3.12.74-60.64.54 is installed
OR kernel-default-man-3.12.74-60.64.54 is installed
OR kernel-devel-3.12.74-60.64.54 is installed
OR kernel-macros-3.12.74-60.64.54 is installed
OR kernel-source-3.12.74-60.64.54 is installed
OR kernel-syms-3.12.74-60.64.54 is installed
OR kernel-xen-3.12.74-60.64.54 is installed
OR kernel-xen-base-3.12.74-60.64.54 is installed
OR kernel-xen-devel-3.12.74-60.64.54 is installed
OR kgraft-patch-3_12_74-60_64_54-default-1-2 is installed
OR kgraft-patch-3_12_74-60_64_54-xen-1-2 is installed
OR kgraft-patch-SLE12-SP1_Update_19-1-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
cups-pk-helper-0.2.5-3 is installed
OR cups-pk-helper-lang-0.2.5-3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND ucode-intel-20180425-13.20 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_121-92_85-default-4-2 is installed
OR kgraft-patch-SLE12-SP2_Update_23-4-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
MozillaFirefox-60.3.0-109.50 is installed
OR MozillaFirefox-devel-60.3.0-109.50 is installed
OR MozillaFirefox-translations-common-60.3.0-109.50 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
libXrender1-0.9.8-7 is installed
OR libXrender1-32bit-0.9.8-7 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
ghostscript-9.27-23.28 is installed
OR ghostscript-x11-9.27-23.28 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_156-94_61-default-7-2 is installed
OR kgraft-patch-SLE12-SP3_Update_19-7-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
ImageMagick-6.8.8.1-71.85 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-71.85 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-71.85 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP4 is installed
AND SuSEfirewall2-3.6.312.333-3.13 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud 6 is installed
AND python-Django-1.8.9-1 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud 7 is installed
AND clamav-0.100.3-33.26 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud 8 is installed
AND Package Information
MozillaFirefox-60.7.2-109.80 is installed
OR MozillaFirefox-translations-common-60.7.2-109.80 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud 9 is installed
AND Package Information
mariadb-10.2.29-3.22 is installed
OR mariadb-galera-10.2.29-3.22 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
libecpg6-10.12-1.18 is installed
OR libpq5-10.12-1.18 is installed
OR libpq5-32bit-10.12-1.18 is installed
OR postgresql10-10.12-1.18 is installed
OR postgresql10-contrib-10.12-1.18 is installed
OR postgresql10-docs-10.12-1.18 is installed
OR postgresql10-libs-10.12-1.18 is installed
OR postgresql10-plperl-10.12-1.18 is installed
OR postgresql10-plpython-10.12-1.18 is installed
OR postgresql10-pltcl-10.12-1.18 is installed
OR postgresql10-server-10.12-1.18 is installed
|