• fix directory traversal vulnerability (#1162657)
  • fix CVE-2014-8501: out-of-bounds write when parsing specially crafted PE executable
  • fix CVE-2014-8502: heap overflow in objdump
  • fix CVE-2014-8503: stack overflow in objdump when parsing specially crafted ihex file
  • fix CVE-2014-8504: stack overflow in the SREC parser
  • fix out of bounds memory write

How to install

sudo dnf upgrade --advisory=FEDORA-2014-14888

This update has been submitted for testing by mhlavink.

5 years ago

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/11954/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/11954/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 testing updates repository.

5 years ago

This update has been pushed to testing

5 years ago

mhlavink has edited this update. New build(s): arm-none-eabi-binutils-cs-2014.05.28-3.fc21. Removed build(s): arm-none-eabi-binutils-cs-2014.05.28-2.fc21.

5 years ago

This update has been submitted for testing by mhlavink.

5 years ago

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/12607/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/12607/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 testing updates repository.

5 years ago

This update has been pushed to testing

5 years ago

This update has been submitted for stable by mhlavink.

5 years ago

Taskotron: upgradepath test PASSED on noarch. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/14993/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 stable updates repository.

5 years ago

This update is currently being pushed to the Fedora 21 stable updates repository.

5 years ago

This update has been pushed to stable

5 years ago

Please login to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
5 years ago
in testing
5 years ago
in stable
5 years ago
modified
5 years ago
BZ#1162570 CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable
0
0
BZ#1162574 CVE-2014-8501 arm-none-eabi-binutils-cs: binutils: out-of-bounds write when parsing specially crafted PE executable [fedora-all]
0
0
BZ#1162594 CVE-2014-8502 binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)
0
0
BZ#1162598 CVE-2014-8502 arm-none-eabi-binutils-cs: binutils: heap overflow in objdump [fedora-all]
0
0
BZ#1162621 CVE-2014-8504 binutils: stack overflow in the SREC parser
0
0
BZ#1162622 CVE-2014-8504 arm-none-eabi-binutils-cs: binutils: stack overflow in the SREC parser [fedora-all]
0
0
BZ#1162655 CVE-2014-8737 binutils: directory traversal vulnerability
0
0
BZ#1162656 arm-none-eabi-binutils-cs: binutils: directory traversal vulnerability [fedora-all]
0
0
BZ#1162666 CVE-2014-8738 binutils: out of bounds memory write
0
0
BZ#1162669 arm-none-eabi-binutils-cs: binutils: out of bounds memory write [fedora-all]
0
0

Automated Test Results