Format: 1.8
Date: Wed, 01 Apr 2020 09:55:08 -0400
Source: libiberty
Binary: libiberty-dev
Architecture: i386
Version: 20170913-1ubuntu0.1
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-005.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libiberty-dev - library of utility functions used by GNU programs
Changes:
 libiberty (20170913-1ubuntu0.1) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: stack Exhaustion in C++ demangling
     - debian/patches/CVE-2018-9138.patch: limit recusion and add
       --no-recruse-limit option to tools that support name demangling.
     - debian/patches/CVE-2018-9138-2.patch: fix a failure in the libiberty
       testsuite by increasing the recursion limit to 2048.
     - CVE-2018-9138
     - CVE-2018-12641
     - CVE-2018-12697
     - CVE-2018-12698
     - CVE-2018-17794
     - CVE-2018-17985
     - CVE-2018-18484
     - CVE-2018-18700
     - CVE-2018-18701
   * SECURITY UPDATE: excessive memory consumption
     - debian/patches/CVE-2018-12934.patch: remove support for demangling
       GCC 2.x era mangling schemes.
     - CVE-2018-12934
     - CVE-2018-18483
   * SECURITY UPDATE: stack consumption and heap-based buffer over-read
     - debian/patches/CVE-2019-907x.patch: reject negative lengths and add
       recursion counter.
     - CVE-2019-9070
     - CVE-2019-9071
   * SECURITY UPDATE: integer overflow and heap-based buffer overflow
     - debian/patches/CVE-2019-14250.patch: check zero value shstrndx.
     - CVE-2019-14250
Checksums-Sha1:
 42ee7bc71e0ebdbd743b84ff8b317e7dd6407c91 146116 libiberty-dev_20170913-1ubuntu0.1_i386.deb
 bef083389768580522c321c947f08abae01f4f57 5100 libiberty_20170913-1ubuntu0.1_i386.buildinfo
Checksums-Sha256:
 e9e52ed570c306da0215a01a7635a31b6a60bd3bdf603ebe1db4753a2f7a375c 146116 libiberty-dev_20170913-1ubuntu0.1_i386.deb
 5f41398b2d7445d1187e9f85c850d0ecc003013f9aadd4e2ab13a865250f6070 5100 libiberty_20170913-1ubuntu0.1_i386.buildinfo
Files:
 20d51f1c8841157f11f0227c97b7270a 146116 libdevel optional libiberty-dev_20170913-1ubuntu0.1_i386.deb
 043539d45f8c27aacbe219e5720638f0 5100 libdevel optional libiberty_20170913-1ubuntu0.1_i386.buildinfo
Original-Maintainer: Debian GCC Maintainers <debian-gcc@lists.debian.org>