========================================================================== Ubuntu Security Notice USN-4012-1 June 10, 2019 elfutils vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in elfutils. Software Description: - elfutils: collection of utilities to handle ELF objects Details: It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into processing a specially crafted file, elfutils could be made to crash or consume resources, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: elfutils 0.170-0.5.0ubuntu1.1 libasm1 0.170-0.5.0ubuntu1.1 libdw1 0.170-0.5.0ubuntu1.1 libelf1 0.170-0.5.0ubuntu1.1 Ubuntu 18.04 LTS: elfutils 0.170-0.4ubuntu0.1 libasm1 0.170-0.4ubuntu0.1 libdw1 0.170-0.4ubuntu0.1 libelf1 0.170-0.4ubuntu0.1 Ubuntu 16.04 LTS: elfutils 0.165-3ubuntu1.2 libasm1 0.165-3ubuntu1.2 libdw1 0.165-3ubuntu1.2 libelf1 0.165-3ubuntu1.2 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/4012-1 CVE-2018-16062, CVE-2018-16402, CVE-2018-16403, CVE-2018-18310, CVE-2018-18520, CVE-2018-18521, CVE-2019-7149, CVE-2019-7150, CVE-2019-7665 Package Information: https://launchpad.net/ubuntu/+source/elfutils/0.170-0.5.0ubuntu1.1 https://launchpad.net/ubuntu/+source/elfutils/0.170-0.4ubuntu0.1 https://launchpad.net/ubuntu/+source/elfutils/0.165-3ubuntu1.2