binutils: Security fix CVE-2017-12967

PATCH In review Armin Kuster 2 participants 29 messages Aug 8, 2018

lore

Share & tools

lore

Armin Kuster

author

2018-08-08 15:35 UTC #0 lore raw

PATCH 1/27 binutils: Security fix CVE-2017-12967

From: Armin Kuster <[email protected]>

affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-12967.patch         | 47 ++++++++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-12967.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index b29b75a..12b579c 100644
@@ -35,6 +35,7 @@ SRC_URI = "\
      file://0013-fix-the-incorrect-assembling-for-ppc-wait-mnemonic.patch \
      file://0014-Detect-64-bit-MIPS-targets.patch \
      file://0015-sync-with-OE-libtool-changes.patch \
+     file://CVE-2017-12967.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-12967.patch new file +47 -0

47 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #1 lore raw

PATCH 2/27 binutils: Secuirty fix CVE-2017-14930

From: Armin Kuster <[email protected]>

affects <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-14930.patch         | 53 ++++++++++++++++++++++
 2 files changed, 54 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14930.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 12b579c..2232781 100644
@@ -36,6 +36,7 @@ SRC_URI = "\
      file://0014-Detect-64-bit-MIPS-targets.patch \
      file://0015-sync-with-OE-libtool-changes.patch \
      file://CVE-2017-12967.patch \
+     file://CVE-2017-14930.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-14930.patch new file +53 -0

53 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #2 lore raw

PATCH 3/27 binutls: Security fix CVE-2017-14932

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-14932.patch         | 46 ++++++++++++++++++++++
 2 files changed, 47 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14932.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 2232781..788f98a 100644
@@ -37,6 +37,7 @@ SRC_URI = "\
      file://0015-sync-with-OE-libtool-changes.patch \
      file://CVE-2017-12967.patch \
      file://CVE-2017-14930.patch \
+     file://CVE-2017-14932.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-14932.patch new file +46 -0

46 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #3 lore raw

PATCH 4/27 binutls: Security fix CVE-2017-14933

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   2 +
 .../binutils/binutils/CVE-2017-14933_p1.patch      |  58 ++++++++++++
 .../binutils/binutils/CVE-2017-14933_p2.patch      | 102 +++++++++++++++++++++
 3 files changed, 162 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14933_p1.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14933_p2.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +2 -0

index 788f98a..fb4ca64 100644
@@ -38,6 +38,8 @@ SRC_URI = "\
      file://CVE-2017-12967.patch \
      file://CVE-2017-14930.patch \
      file://CVE-2017-14932.patch \
+     file://CVE-2017-14933_p1.patch \
+     file://CVE-2017-14933_p2.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-14933_p1.patch new file +58 -0

58 lines not on this page · raw message

meta/recipes-devtools/binutils/binutils/CVE-2017-14933_p2.patch new file +102 -0

102 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #4 lore raw

PATCH 5/27 binutls: Security fix CVE-2017-14934

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-14934.patch         | 63 ++++++++++++++++++++++
 2 files changed, 64 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14934.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index fb4ca64..765813d 100644
@@ -40,6 +40,7 @@ SRC_URI = "\
      file://CVE-2017-14932.patch \
      file://CVE-2017-14933_p1.patch \
      file://CVE-2017-14933_p2.patch \
+     file://CVE-2017-14934.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-14934.patch new file +63 -0

63 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #5 lore raw

PATCH 6/27 binutls: Security fix for CVE-2017-14938

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-14938.patch         | 64 ++++++++++++++++++++++
 2 files changed, 65 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14938.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 765813d..8e92b92 100644
@@ -41,6 +41,7 @@ SRC_URI = "\
      file://CVE-2017-14933_p1.patch \
      file://CVE-2017-14933_p2.patch \
      file://CVE-2017-14934.patch \
+     file://CVE-2017-14938.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-14938.patch new file +64 -0

64 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #6 lore raw

PATCH 7/27 binutls: Security fix for CVE-2017-14939

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-14939.patch         | 56 ++++++++++++++++++++++
 2 files changed, 57 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14939.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 8e92b92..c0ad94c 100644
@@ -42,6 +42,7 @@ SRC_URI = "\
      file://CVE-2017-14933_p2.patch \
      file://CVE-2017-14934.patch \
      file://CVE-2017-14938.patch \
+     file://CVE-2017-14939.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-14939.patch new file +56 -0

56 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #7 lore raw

PATCH 8/27 binutils: Security fix for CVE-2017-14940

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-14940.patch         | 47 ++++++++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-14940.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index c0ad94c..45e4393 100644
@@ -43,6 +43,7 @@ SRC_URI = "\
      file://CVE-2017-14934.patch \
      file://CVE-2017-14938.patch \
      file://CVE-2017-14939.patch \
+     file://CVE-2017-14940.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-14940.patch new file +47 -0

47 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #8 lore raw

PATCH 9/27 binutls: Security fix for CVE-2017-15021

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-15021.patch         | 48 ++++++++++++++++++++++
 2 files changed, 49 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15021.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 45e4393..6f7d655 100644
@@ -44,6 +44,7 @@ SRC_URI = "\
      file://CVE-2017-14938.patch \
      file://CVE-2017-14939.patch \
      file://CVE-2017-14940.patch \
+     file://CVE-2017-15021.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15021.patch new file +48 -0

48 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #9 lore raw

PATCH 10/27 binutls: Security fix for CVE-2017-15022

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affected: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-15022.patch         | 61 ++++++++++++++++++++++
 2 files changed, 62 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15022.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 6f7d655..05b7f22 100644
@@ -45,6 +45,7 @@ SRC_URI = "\
      file://CVE-2017-14939.patch \
      file://CVE-2017-14940.patch \
      file://CVE-2017-15021.patch \
+     file://CVE-2017-15022.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15022.patch new file +61 -0

61 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #10 lore raw

PATCH 11/27 binutls: Security fix for CVE-2017-15023

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-15023.patch         | 52 ++++++++++++++++++++++
 2 files changed, 53 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15023.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 05b7f22..08b233f 100644
@@ -46,6 +46,7 @@ SRC_URI = "\
      file://CVE-2017-14940.patch \
      file://CVE-2017-15021.patch \
      file://CVE-2017-15022.patch \
+     file://CVE-2017-15023.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15023.patch new file +52 -0

52 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #11 lore raw

PATCH 12/27 binutls: Security fix for CVE-2017-15024

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   1 +
 .../binutils/binutils/CVE-2017-15024.patch         | 227 +++++++++++++++++++++
 2 files changed, 228 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15024.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 08b233f..c13cb50 100644
@@ -47,6 +47,7 @@ SRC_URI = "\
      file://CVE-2017-15021.patch \
      file://CVE-2017-15022.patch \
      file://CVE-2017-15023.patch \
+     file://CVE-2017-15024.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15024.patch new file +227 -0

227 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #12 lore raw

PATCH 13/27 binutls: Security fix for CVE-2017-15025

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-15025.patch         | 47 ++++++++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15025.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index c13cb50..8bd880c 100644
@@ -48,6 +48,7 @@ SRC_URI = "\
      file://CVE-2017-15022.patch \
      file://CVE-2017-15023.patch \
      file://CVE-2017-15024.patch \
+     file://CVE-2017-15025.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15025.patch new file +47 -0

47 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #13 lore raw

PATCH 14/27 binutls: Security fix for CVE-2017-15225

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-15225.patch         | 48 ++++++++++++++++++++++
 2 files changed, 49 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15225.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 8bd880c..1983d85 100644
@@ -49,6 +49,7 @@ SRC_URI = "\
      file://CVE-2017-15023.patch \
      file://CVE-2017-15024.patch \
      file://CVE-2017-15025.patch \
+     file://CVE-2017-15225.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15225.patch new file +48 -0

48 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #14 lore raw

PATCH 15/27 binutls: Security fix for CVE-2017-15939

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   1 +
 .../binutils/binutils/CVE-2017-15939.patch         | 113 +++++++++++++++++++++
 2 files changed, 114 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15939.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 1983d85..917f667 100644
@@ -50,6 +50,7 @@ SRC_URI = "\
      file://CVE-2017-15024.patch \
      file://CVE-2017-15025.patch \
      file://CVE-2017-15225.patch \
+     file://CVE-2017-15939.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15939.patch new file +113 -0

113 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #15 lore raw

PATCH 16/27 binutls: Security fix for CVE-2017-15996

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-15996.patch         | 84 ++++++++++++++++++++++
 2 files changed, 85 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-15996.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 917f667..7928de9 100644
@@ -51,6 +51,7 @@ SRC_URI = "\
      file://CVE-2017-15025.patch \
      file://CVE-2017-15225.patch \
      file://CVE-2017-15939.patch \
+     file://CVE-2017-15996.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-15996.patch new file +84 -0

84 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #16 lore raw

PATCH 17/27 binutls: Security fix for CVE-2017-16826

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-16826.patch         | 53 ++++++++++++++++++++++
 2 files changed, 54 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16826.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 7928de9..d75ec50 100644
@@ -52,6 +52,7 @@ SRC_URI = "\
      file://CVE-2017-15225.patch \
      file://CVE-2017-15939.patch \
      file://CVE-2017-15996.patch \
+     file://CVE-2017-16826.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-16826.patch new file +53 -0

53 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #17 lore raw

PATCH 18/27 binutls: Security fix for CVE-2017-16827

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-16827.patch         | 95 ++++++++++++++++++++++
 2 files changed, 96 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16827.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index d75ec50..7d05046 100644
@@ -53,6 +53,7 @@ SRC_URI = "\
      file://CVE-2017-15939.patch \
      file://CVE-2017-15996.patch \
      file://CVE-2017-16826.patch \
+     file://CVE-2017-16827.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-16827.patch new file +95 -0

95 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #18 lore raw

PATCH 19/27 binutls: Security fix for CVE-2017-16828

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   2 +
 .../binutils/binutils/CVE-2017-16828_p1.patch      |  79 +++++++++++
 .../binutils/binutils/CVE-2017-16828_p2.patch      | 149 +++++++++++++++++++++
 3 files changed, 230 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16828_p1.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16828_p2.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +2 -0

index 7d05046..65d3c34 100644
@@ -54,6 +54,8 @@ SRC_URI = "\
      file://CVE-2017-15996.patch \
      file://CVE-2017-16826.patch \
      file://CVE-2017-16827.patch \
+     file://CVE-2017-16828_p1.patch \
+     file://CVE-2017-16828_p2.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-16828_p1.patch new file +79 -0

79 lines not on this page · raw message

meta/recipes-devtools/binutils/binutils/CVE-2017-16828_p2.patch new file +149 -0

149 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #19 lore raw

PATCH 20/27 binutls: Security fix for CVE-2017-16829

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-16829.patch         | 82 ++++++++++++++++++++++
 2 files changed, 83 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16829.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 65d3c34..1fa3eb7 100644
@@ -56,6 +56,7 @@ SRC_URI = "\
      file://CVE-2017-16827.patch \
      file://CVE-2017-16828_p1.patch \
      file://CVE-2017-16828_p2.patch \
+     file://CVE-2017-16829.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-16829.patch new file +82 -0

82 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #20 lore raw

PATCH 21/27 binutls: Security fix for CVE-2017-16830

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-16830.patch         | 91 ++++++++++++++++++++++
 2 files changed, 92 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16830.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 1fa3eb7..69ad9b2 100644
@@ -57,6 +57,7 @@ SRC_URI = "\
      file://CVE-2017-16828_p1.patch \
      file://CVE-2017-16828_p2.patch \
      file://CVE-2017-16829.patch \
+     file://CVE-2017-16830.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-16830.patch new file +91 -0

91 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #21 lore raw

PATCH 22/27 binutls: Security fix for CVE-2017-16831

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-16831.patch         | 77 ++++++++++++++++++++++
 2 files changed, 78 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16831.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 69ad9b2..d9758c4 100644
@@ -58,6 +58,7 @@ SRC_URI = "\
      file://CVE-2017-16828_p2.patch \
      file://CVE-2017-16829.patch \
      file://CVE-2017-16830.patch \
+     file://CVE-2017-16831.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-16831.patch new file +77 -0

77 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #22 lore raw

PATCH 23/27 binutls: Security fix for CVE-2017-16832

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-16832.patch         | 61 ++++++++++++++++++++++
 2 files changed, 62 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-16832.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index d9758c4..b1842cb 100644
@@ -59,6 +59,7 @@ SRC_URI = "\
      file://CVE-2017-16829.patch \
      file://CVE-2017-16830.patch \
      file://CVE-2017-16831.patch \
+     file://CVE-2017-16832.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-16832.patch new file +61 -0

61 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #23 lore raw

PATCH 24/27 binutls: Security fix for CVE-2017-17080

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-17080.patch         | 78 ++++++++++++++++++++++
 2 files changed, 79 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-17080.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index b1842cb..3617b20 100644
@@ -60,6 +60,7 @@ SRC_URI = "\
      file://CVE-2017-16830.patch \
      file://CVE-2017-16831.patch \
      file://CVE-2017-16832.patch \
+     file://CVE-2017-17080.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-17080.patch new file +78 -0

78 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #24 lore raw

PATCH 25/27 Binutils: Security fix for CVE-2017-17121

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   1 +
 .../binutils/binutils/CVE-2017-17121.patch         | 366 +++++++++++++++++++++
 2 files changed, 367 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-17121.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 3617b20..c1d5740 100644
@@ -61,6 +61,7 @@ SRC_URI = "\
      file://CVE-2017-16831.patch \
      file://CVE-2017-16832.patch \
      file://CVE-2017-17080.patch \
+     file://CVE-2017-17121.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-17121.patch new file +366 -0

366 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #25 lore raw

PATCH 26/27 binutls: Security fix for CVE-2017-17122

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-17122.patch         | 58 ++++++++++++++++++++++
 2 files changed, 59 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-17122.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index c1d5740..577bbf0 100644
@@ -62,6 +62,7 @@ SRC_URI = "\
      file://CVE-2017-16832.patch \
      file://CVE-2017-17080.patch \
      file://CVE-2017-17121.patch \
+     file://CVE-2017-17122.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-17122.patch new file +58 -0

58 lines not on this page · raw message

Signature · 1 line

2.7.4

Armin Kuster

author

2018-08-08 15:35 UTC #26 lore raw

PATCH 27/27 binutls: Security fix for CVE-2017-17125

In reply to Armin Kuster

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

Signed-off-by Armin Kuster <[email protected]>

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   1 +
 .../binutils/binutils/CVE-2017-17125.patch         | 129 +++++++++++++++++++++
 2 files changed, 130 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-17125.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index 577bbf0..c4d40ea 100644
@@ -63,6 +63,7 @@ SRC_URI = "\
      file://CVE-2017-17080.patch \
      file://CVE-2017-17121.patch \
      file://CVE-2017-17122.patch \
+     file://CVE-2017-17125.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-17125.patch new file +129 -0

129 lines not on this page · raw message

Signature · 1 line

2.7.4

Patchwork

2018-08-08 16:06 UTC #27 lore raw

✗ patchtest: failure for "[ROCKO] binutils: Security fix..." and 26 more

In reply to Armin Kuster

== Series Details ==

Series: "[ROCKO] binutils: Security fix..." and 26 more
Revision: 1
URL : https://patchwork.openembedded.org/series/13427/
State : failure

== Summary ==

Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the proposed series by patchtest resulting in the following failures:

* Issue Upstream-Status is in incorrect format [test_upstream_status_presence_format]

  Suggested fix    Fix Upstream-Status format in CVE-2017-12967.patch
  Current          Upstream-Status: backport
  Standard format  Upstream-Status: <Valid status>
  Valid status     Pending, Accepted, Backport, Denied, Inappropriate [reason], Submitted [where]

If you believe any of these test results are incorrect, please reply to the mailing list ([email protected]) raising your concerns. Otherwise we would appreciate you correcting the issues and submitting a new version of the patchset if applicable. Please ensure you add/increment the version number when sending the new version (i.e. [PATCH] -> [PATCH v2] -> [PATCH v3] -> ...).

---

Guidelines:     https://www.openembedded.org/wiki/Commit_Patch_Message_Guidelines
Test framework: http://git.yoctoproject.org/cgit/cgit.cgi/patchtest
Test suite:     http://git.yoctoproject.org/cgit/cgit.cgi/patchtest-oe

akuster808

author

2018-08-08 16:40 UTC #28 lore raw

In reply to Armin Kuster

Quoted 5 lines · Armin Kuster

From: Armin Kuster <[email protected]>
affects: <= 2.29.1
Signed-off-by Armin Kuster <[email protected]>

This one is really CVE-2017-17124 so it will be renamed in V2

CVE-2017-12967 is already in 2.29.1

Quoted 71 lines

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-12967.patch         | 47 ++++++++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-12967.patch

meta/recipes-devtools/binutils/binutils-2.29.1.inc +1 -0

index b29b75a..12b579c 100644
@@ -35,6 +35,7 @@ SRC_URI = "\
      file://0013-fix-the-incorrect-assembling-for-ppc-wait-mnemonic.patch \
      file://0014-Detect-64-bit-MIPS-targets.patch \
      file://0015-sync-with-OE-libtool-changes.patch \
+     file://CVE-2017-12967.patch \
 "
 S  = "${WORKDIR}/git"

meta/recipes-devtools/binutils/binutils/CVE-2017-12967.patch new file +47 -0

new file mode 100644
index 0000000..ab19d21
@@ -0,0 +1,47 @@
+From b0029dce6867de1a2828293177b0e030d2f0f03c Mon Sep 17 00:00:00 2001
+From: Nick Clifton <[email protected]>
+Date: Tue, 28 Nov 2017 18:00:29 +0000
+Subject: [PATCH] Prevent a memory exhaustion problem when trying to read in
+ strings from a COFF binary with a corrupt string table size.
+
+	PR 22507
+	* coffgen.c (_bfd_coff_read_string_table): Check for an excessive
+	size of the external string table.
+
+Upstream-Status: backport
+Affects binutls <= 2.29.1
+CVE:  CVE-2017-12967 
+Signed-off-by: Armin Kuster <[email protected]>
+
+---
+ bfd/ChangeLog | 6 ++++++
+ bfd/coffgen.c | 4 ++--
+ 2 files changed, 8 insertions(+), 2 deletions(-)
+
+Index: git/bfd/coffgen.c
+===================================================================
+--- git.orig/bfd/coffgen.c
++++ git/bfd/coffgen.c
+@@ -1709,7 +1709,7 @@ _bfd_coff_read_string_table (bfd *abfd)
+ #endif
+     }
+ 
+-  if (strsize < STRING_SIZE_SIZE)
++  if (strsize < STRING_SIZE_SIZE || strsize > bfd_get_file_size (abfd))
+     {
+       _bfd_error_handler
+ 	/* xgettext: c-format */
+Index: git/bfd/ChangeLog
+===================================================================
+--- git.orig/bfd/ChangeLog
++++ git/bfd/ChangeLog
+@@ -1,3 +1,9 @@
++2017-11-28  Nick Clifton  <[email protected]>
++
++       PR 22507
++       * coffgen.c (_bfd_coff_read_string_table): Check for an excessive
++       size of the external string table.
++
+ 2018-03-28  Eric Botcazou  <[email protected]>
+ 
+ 	PR ld/22972