Publishing details

• Published on 2020-04-08
• Copied from ubuntu xenial in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

libiberty (20160215-1ubuntu0.3) xenial-security; urgency=medium

  * SECURITY UPDATE: stack Exhaustion in C++ demangling
    - debian/patches/CVE-2018-9138.patch: limit recusion and add
      --no-recruse-limit option to tools that support name demangling.
    - debian/patches/CVE-2018-9138-2.patch: fix a failure in the libiberty
      testsuite by increasing the recursion limit to 2048.
    - CVE-2018-9138
    - CVE-2018-12641
    - CVE-2018-12697
    - CVE-2018-12698
    - CVE-2018-17794
    - CVE-2018-17985
    - CVE-2018-18484
    - CVE-2018-18700
    - CVE-2018-18701
  * SECURITY UPDATE: excessive memory consumption
    - debian/patches/CVE-2018-12934.patch: remove support for demangling
      GCC 2.x era mangling schemes.
    - CVE-2018-12934
    - CVE-2018-18483
  * SECURITY UPDATE: stack consumption and heap-based buffer over-read
    - debian/patches/CVE-2019-907x.patch: reject negative lengths and add
      recursion counter.
    - CVE-2019-9070
    - CVE-2019-9071
  * SECURITY UPDATE: integer overflow and heap-based buffer overflow
    - debian/patches/CVE-2019-14250.patch: check zero value shstrndx.
    - CVE-2019-14250

 -- Marc Deslauriers <email address hidden>  Wed, 01 Apr 2020 11:39:51 -0400

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el
• s390x

Built packages

• libiberty-dev library of utility functions used by GNU programs

Package files

• libiberty-dev_20160215-1ubuntu0.3_amd64.deb (129.4 KiB)
• libiberty-dev_20160215-1ubuntu0.3_arm64.deb (112.8 KiB)
• libiberty-dev_20160215-1ubuntu0.3_armhf.deb (114.2 KiB)
• libiberty-dev_20160215-1ubuntu0.3_i386.deb (135.0 KiB)
• libiberty-dev_20160215-1ubuntu0.3_powerpc.deb (117.1 KiB)
• libiberty-dev_20160215-1ubuntu0.3_ppc64el.deb (137.6 KiB)
• libiberty-dev_20160215-1ubuntu0.3_s390x.deb (127.7 KiB)
• libiberty_20160215-1ubuntu0.3.debian.tar.xz (49.9 KiB)
• libiberty_20160215-1ubuntu0.3.dsc (1.9 KiB)
• libiberty_20160215.orig.tar.xz (1.0 MiB)