{"schemaVersion":3,"id":"OPENSUSE-SU-2019:2415-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for binutils\n\nThis update for binutils fixes the following issues:\n\nbinutils was updated to current 2.32 branch [jsc#ECO-368].\n\nIncludes following security fixes:\n\n- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)\n- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)\n- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)\n- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)\n- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)\n- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)\n- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)\n- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)\n- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)\n- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)\n- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)\n- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)\n- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)\n- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)\n- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)\n- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)\n- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)\n\n- enable xtensa architecture (Tensilica lc6 and related)\n- Use -ffat-lto-objects in order to provide assembly for static libs\n  (bsc#1141913).\n- Fixed some LTO build issues (bsc#1133131 bsc#1133232).\n- riscv: Don't check ABI flags if no code section\n- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).\n- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).\n\nUpdate to binutils 2.32:\n\n* The binutils now support for the C-SKY processor series.\n* The x86 assembler now supports a -mvexwig=[0|1] option to control\n  encoding of VEX.W-ignored (WIG) VEX instructions.\n  It also has a new -mx86-used-note=[yes|no] option to generate (or\n  not) x86 GNU property notes.\n* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),\n  the Loongson EXTensions (EXT) instructions, the Loongson Content\n  Address Memory (CAM) ASE and the Loongson MultiMedia extensions\n  Instructions (MMI) ASE.\n* The addr2line, c++filt, nm and objdump tools now have a default\n  limit on the maximum amount of recursion that is allowed whilst\n  demangling strings.  This limit can be disabled if necessary.\n* Objdump's --disassemble option can now take a parameter,\n  specifying the starting symbol for disassembly.  Disassembly will\n  continue from this symbol up to the next symbol or the end of the\n  function.\n* The BFD linker will now report property change in linker map file\n  when merging GNU properties.\n* The BFD linker's -t option now doesn't report members within\n  archives, unless -t is given twice.  This makes it more useful\n  when generating a list of files that should be packaged for a\n  linker bug report.\n* The GOLD linker has improved warning messages for relocations that\n  refer to discarded sections.\n\n- Improve relro support on s390 [fate#326356]\n- Fix broken debug symbols (bsc#1118644)\n- Handle ELF compressed header alignment correctly.\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.","dates":{"published":"2019-10-30T17:25:53.000Z","modified":"2026-02-04T03:05:23.612Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"binutils&distro=openSUSE Leap 15.0","name":"binutils","label":"binutils&distro=openSUSE Leap 15.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/binutils&distro=openSUSE Leap 15.0","purlType":"rpm","versions":[{"text":"< 2.32-lp150.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.32-lp150.10.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Z3JUZNUB5MLFYPANGJ7Z7AR432VRY6KN/#Z3JUZNUB5MLFYPANGJ7Z7AR432VRY6KN","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1109412","label":"bugzilla.suse.com/1109412","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1109413","label":"bugzilla.suse.com/1109413","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1109414","label":"bugzilla.suse.com/1109414","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111996","label":"bugzilla.suse.com/1111996","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112534","label":"bugzilla.suse.com/1112534","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112535","label":"bugzilla.suse.com/1112535","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1113247","label":"bugzilla.suse.com/1113247","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1113252","label":"bugzilla.suse.com/1113252","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1113255","label":"bugzilla.suse.com/1113255","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1116827","label":"bugzilla.suse.com/1116827","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118644","label":"bugzilla.suse.com/1118644","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118830","label":"bugzilla.suse.com/1118830","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118831","label":"bugzilla.suse.com/1118831","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1120640","label":"bugzilla.suse.com/1120640","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1121034","label":"bugzilla.suse.com/1121034","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1121035","label":"bugzilla.suse.com/1121035","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1121056","label":"bugzilla.suse.com/1121056","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1133131","label":"bugzilla.suse.com/1133131","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1133232","label":"bugzilla.suse.com/1133232","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1141913","label":"bugzilla.suse.com/1141913","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142772","label":"bugzilla.suse.com/1142772","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1152590","label":"bugzilla.suse.com/1152590","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1154016","label":"bugzilla.suse.com/1154016","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1154025","label":"bugzilla.suse.com/1154025","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000876","label":"www.suse.com/security/cve/CVE-2018-1000876","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17358","label":"www.suse.com/security/cve/CVE-2018-17358","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17359","label":"www.suse.com/security/cve/CVE-2018-17359","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17360","label":"www.suse.com/security/cve/CVE-2018-17360","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17985","label":"www.suse.com/security/cve/CVE-2018-17985","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18309","label":"www.suse.com/security/cve/CVE-2018-18309","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18483","label":"www.suse.com/security/cve/CVE-2018-18483","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18484","label":"www.suse.com/security/cve/CVE-2018-18484","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18605","label":"www.suse.com/security/cve/CVE-2018-18605","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18606","label":"www.suse.com/security/cve/CVE-2018-18606","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18607","label":"www.suse.com/security/cve/CVE-2018-18607","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19931","label":"www.suse.com/security/cve/CVE-2018-19931","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19932","label":"www.suse.com/security/cve/CVE-2018-19932","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20623","label":"www.suse.com/security/cve/CVE-2018-20623","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20651","label":"www.suse.com/security/cve/CVE-2018-20651","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20671","label":"www.suse.com/security/cve/CVE-2018-20671","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6323","label":"www.suse.com/security/cve/CVE-2018-6323","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6543","label":"www.suse.com/security/cve/CVE-2018-6543","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6759","label":"www.suse.com/security/cve/CVE-2018-6759","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6872","label":"www.suse.com/security/cve/CVE-2018-6872","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7208","label":"www.suse.com/security/cve/CVE-2018-7208","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7568","label":"www.suse.com/security/cve/CVE-2018-7568","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7569","label":"www.suse.com/security/cve/CVE-2018-7569","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7570","label":"www.suse.com/security/cve/CVE-2018-7570","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7642","label":"www.suse.com/security/cve/CVE-2018-7642","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7643","label":"www.suse.com/security/cve/CVE-2018-7643","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8945","label":"www.suse.com/security/cve/CVE-2018-8945","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010180","label":"www.suse.com/security/cve/CVE-2019-1010180","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-1000876","CVE-2018-17358","CVE-2018-17359","CVE-2018-17360","CVE-2018-17985","CVE-2018-18309","CVE-2018-18483","CVE-2018-18484","CVE-2018-18605","CVE-2018-18606","CVE-2018-18607","CVE-2018-19931","CVE-2018-19932","CVE-2018-20623","CVE-2018-20651","CVE-2018-20671","CVE-2018-6323","CVE-2018-6543","CVE-2018-6759","CVE-2018-6872","CVE-2018-7208","CVE-2018-7568","CVE-2018-7569","CVE-2018-7570","CVE-2018-7642","CVE-2018-7643","CVE-2018-8945","CVE-2019-1010180"],"downstream":[],"duplicates":[],"related":["CVE-2018-1000876","CVE-2018-17358","CVE-2018-17359","CVE-2018-17360","CVE-2018-17985","CVE-2018-18309","CVE-2018-18483","CVE-2018-18484","CVE-2018-18605","CVE-2018-18606","CVE-2018-18607","CVE-2018-19931","CVE-2018-19932","CVE-2018-20623","CVE-2018-20651","CVE-2018-20671","CVE-2018-6323","CVE-2018-6543","CVE-2018-6759","CVE-2018-6872","CVE-2018-7208","CVE-2018-7568","CVE-2018-7569","CVE-2018-7570","CVE-2018-7642","CVE-2018-7643","CVE-2018-8945","CVE-2019-1010180"]},"timeline":[{"kind":"published","date":"2019-10-30T17:25:53.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:05:23.612Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:46:44.392Z","stale":false,"partial":false}}